PT-2004-1263 · Verity · Verity Ultraseek

Martin Oneal · Published 2004-05-06 · Updated 2017-07-11 · CVE-2004-0050

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Verity Ultraseek versions prior to 5.2.2

Description The issue allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as NUL, CON, AUX, COM1, COM2, and others.

Recommendations For versions prior to 5.2.2, update to version 5.2.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-0050

Affected Products

Verity Ultraseek

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0050 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16066 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0050 · Note
• http://marc.info/?l=bugtraq&m=108377388114888&w=2 · Note