medium5.0Public exploit code
CVE-2003-0153
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mozilla Bonsai 1.3 - Full Path Disclosure2002-08-20 · webapps · cgi · Verified
Impact
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Bonsai | Version 1.3 |
References
- NVD record
- CVE.org record
- http://bugzilla.mozilla.org/show_bug.cgi?id=187230
- http://marc.info/?l=bugtraq&m=102980129101054&w=2
- http://www.debian.org/security/2003/dsa-265
- http://www.securityfocus.com/bid/5517
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9921
- http://bugzilla.mozilla.org/show_bug.cgi?id=187230
- http://marc.info/?l=bugtraq&m=102980129101054&w=2
- http://www.debian.org/security/2003/dsa-265
- http://www.securityfocus.com/bid/5517
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9921