CVE-2004-2518
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/12/2004
Last modified:
07/11/2023
Description
Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00") to a URL or (2) an invalid LANGUAGE parameter to web.tmpl, which reveals the full installation path in an error message.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:geeos_team:gattaca_server_2003:1.1.10.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt
- http://secunia.com/advisories/12071
- http://securitytracker.com/id?1010703=
- http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction%3Ddisplay%3Bnum%3D1091194176%3Bstart%3D0
- http://www.osvdb.org/7922
- http://www.osvdb.org/7923
- http://www.securityfocus.com/bid/10729
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16700