Description
Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet directory, then comparing the resulting error messages.
References
- 17644 third-party-advisory
- 20977 vdb-entry
- http://metasploit.com/research/vulns/google_proxystylesheet/
- 20051121 Google Search Appliance proxystylesheet Flaws mailing-list
- ADV-2005-2500 vdb-entry
- 15509 vdb-entry
- 1015246 vdb-entry