Unscored CVE-2002-1454 EUVD-2002-1437GHSA-cjcx-qpgc-qq97

MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does n…

Published Mar 18, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message.

References

20020814 new bugs in MyWebServer mailing-list
20020814 new bugs in MyWebServer mailing-list
5471 vdb-entry
mywebserver-invalid-path-disclosure(9862) vdb-entry