Security Advisory

CVE-2002-0654

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-08-20 04:00:00

Last updated 2024-08-08 02:56:38

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked.

← Browse all CVEs View on cve.org ↗