CVE-2002-0921 in csNews

Sumário (Inglês)

CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Divulgação

04/10/2002

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
18858	CGIScript.net csNews viewnews csNews.cgi Path Divulgação de Informação	200	Não definido	Não definido	CVE-2002-0921

Fontes

• MITRE
• NVD
• CVE Details