Description
htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | htdig | 2:3.1.6-7.el3 | RHBA-2007:0026 |
Advisories 1
- RHBA-2007:0026 Red Hat Bug Fix Advisory: htdig bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 4366 vdb-entry
- oval:org.mitre.oval:def:10526 vdb-entry signature
- htdig-htsearch-path-disclosure(7367) vdb-entry
- http://www.securiteam.com/exploits/htDig_reveals_web_server_configuration_paths.html