CVE-2004-0050

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such…

published May 6, 2004

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01388 · 71.9th percentile
Published
2004-05-06T04:00Z
EPSS history
Timeline
  • 06 MAY 04:00Z
    Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such…
    cvelistv5