rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-2079 
mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial of service via malformed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2002-2080 
Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large number of RCPT TO: messages during an SMTP session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2002-2081 
cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2002-2082 
FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock the mailboxes of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2002-2083 
The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can be launched from the Novell Netware login screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2002-2084 
Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) l and (2) topic parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2002-2085 
Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2002-2086 
Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via (1) "<<script" in unspecified input fields or (2) a javascript: URL in the src attribute of an IMG tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2002-2087 
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2088 
The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2089 
Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2090 
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2091 
Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2092 
Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2093 
The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2094 
Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2095 
Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.webroot and (2) index.ipallow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2096 
Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2097 
The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2098 
Buffer overflow in axspawn.c in Axspawn-pam before 0.2.1a allows remote attackers to execute arbitrary code via large packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2099 
Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable.  NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2100 
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2101 
Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2102 
InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2103 
Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2104 
graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2105 
Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2106 
PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2107 
Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2108 
Unknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold from November 2001 to January 2002, allows remote attackers to modify data via a web page or HTML e-mail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2109 
Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2110 
The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset) by connecting to port 80 on the 10.0.0.0/8 device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2111 
Fwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the kernel to return a large packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2112 
RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2113 
search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2114 
Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the section parameter, which is passed to an eval call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2115 
Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2116 
Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP port scan, as demonstrated using nmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2117 
Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2118 
Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2119 
Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2120 
Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2121 
SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a long SMTP (1) HELO or (2) RCPT TO command, possibly due to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2122 
Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2002-2123 
PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERY_BASEDIR parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-16T04:00:00.000Z
CVE-2002-2124 
The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closing the connection while recv is executing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2002-2125 
Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2126 
restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2127 
Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could allow local privileged processes to overwrite kernel memory by accessing the device through a symlink.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2128 
editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2129 
Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2130 
publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2131 
Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2132 
Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2133 
Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2134 
haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2002-2137 
GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2138 
RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2139 
Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2140 
Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2141 
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans (EJB) on more than one server, will remove the security constraints and roles on all servers for any Servlets or EJB that are used by an application that is undeployed on one server, which could allow remote attackers to conduct unauthorized activities in violation of the intended restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2142 
An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not prepend a "/" character in certain URL patterns, which prevents the proper enforcement of role mappings and policies in applications that use the extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2143 
The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2144 
Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the "/" (forward slash) or "." (dot) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2145 
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2146 
cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2148 
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2149 
Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2150 
Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2152 
The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2153 
Format string vulnerability in the administrative pages of the PL/SQL module for Oracle Application Server 4.0.8 and 4.0.8 2 allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2154 
Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2155 
Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2156 
Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2158 
zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z