PT-2001-2172 · Xcache · Xcache

Published 2001-09-21 · Updated 2017-12-19 · CVE-2001-1023

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xcache version 2.1

Description The issue allows remote attackers to determine the absolute path of web server documents. This is achieved by requesting a URL that is not cached, which returns the full pathname in the Content-PageName header.

Recommendations For Xcache version 2.1, update to a version where this issue is fixed, as the current version allows attackers to obtain sensitive information about the web server's document path.

Fix

Related Identifiers

CVE-2001-1023

Affected Products

Xcache

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1023 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-09/0182.html · Vendor Advisory
• http://securityfocus.com/bid/3352 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7159 · Note