CVE-2002-0266 Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes the full pathname.
MediumCVSS 5.0
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes the full pathname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| thunderstone software texis | = 3.0 | No fix listed |
References
- 20020206 texis(CGI) Path Disclosure Vulnerability mailing-list
- 20020211 Re: texis(CGI) Path Disclosure Vulnerability mailing-list
- texis-cgi-information-disclosure(8103) vdb-entry vendor-advisory
- 4035 vdb-entry