CVE-2000-1191 | BDVDB-2026-2955 Detail

Description#

htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/4366
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10526
https://exchange.xforce.ibmcloud.com/vulnerabilities/7367
http://www.securiteam.com/exploits/htDig_reveals_web_server_configuration_paths.html

Exploit#

No public exploit known

History#

Version 12001-09-12Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.