CVE-2003-1269 AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message.
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| an-http | = 1.41e | No fix listed |
References
- an-http-path-disclosure(10976) vdb-entry
- 20030104 AN HTTPd v.1.41e: DoS, CSS, real patch attack mailing-list vendor-advisory
- 6528 vdb-entry