medium5.0Public exploit code
CVE-2004-1223
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure2004-12-09 · remote · windows · Verified
Impact
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F-Secure | Policy Manager | Version 5.11 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110262921306862&w=2
- http://www.oliverkarow.de/research/f-secure.txt
- http://www.securityfocus.com/bid/11869
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18413
- http://marc.info/?l=bugtraq&m=110262921306862&w=2
- http://www.oliverkarow.de/research/f-secure.txt
- http://www.securityfocus.com/bid/11869
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18413