Unscored CVE-2002-1677 EUVD-2002-1658GHSA-wfpg-gw9j-p5g3

14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an inval…

Published Jun 21, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path.

References

mrtg-14allcgi-path-disclosure(8070) vdb-entry
20020204 Re: Mrtg Path Disclosure Vulnerability mailing-list
20020205 Mrtg Path Disclosure Vulnerability (Revised) mailing-list
4021 vdb-entry