PT-2004-1263 · Verity · Verity Ultraseek

Martin Oneal · Publicado 2004-05-06 · Atualizado 2017-07-11 · CVE-2004-0050

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Verity Ultraseek versions prior to 5.2.2

Description The issue allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as NUL, CON, AUX, COM1, COM2, and others.

Recommendations For versions prior to 5.2.2, update to version 5.2.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0050

Produtos afetados

Verity Ultraseek

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0050 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16066 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0050 · Nota
• http://marc.info/?l=bugtraq&m=108377388114888&w=2 · Nota