CVE-2003-0456

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the…

published July 15, 2003

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using _vti_bin/fpcount.exe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02762 · 86.1th percentile
Published
2003-07-15T04:00Z
EPSS history
Timeline
  • 15 JUL 04:00Z
    VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the…
    cvelistv5