Unscored CVE-2002-0596 EUVD-2002-0591GHSA-jmhj-f3wf-272c

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl wit…

Published Jun 11, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.

References

webtrends-profile-path-disclosure(8865) vdb-entry
20020416 Webtrends Reporting Center Buffer Overflow (#NISR17042002C) mailing-list
10447 vdb-entry
http://www.ngssoftware.com/advisories/wtr.txt