medium5.0Public exploit code
CVE-2002-1527
emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EmuMail 5.0 - Web Root Full Path Disclosure2002-09-29 · webapps · cgi · Verified
Impact
emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emumail | Emu Webmail | Version 5.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html
- http://www.iss.net/security_center/static/10204.php
- http://www.iss.net/security_center/static/10205.php
- http://www.securityfocus.com/bid/5823
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html
- http://www.iss.net/security_center/static/10204.php
- http://www.iss.net/security_center/static/10205.php
- http://www.securityfocus.com/bid/5823