Security Advisory
CVE-2002-1527
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.