Description
Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3.
References
- 2650 vdb-entry
- 20010424 Advisory for Netcruiser mailing-list
- netcruiser-server-path-disclosure(6468) vdb-entry