Description
AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message.
References
- 20030104 AN HTTPd v.1.41e: DoS, CSS, real patch attack mailing-list
- 6528 vdb-entry
- an-http-path-disclosure(10976) vdb-entry