CVE-2003-1269

AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-09-16

Affected products

• An-http (An)

References

• http://www.iss.net/security_center/static/10976.php
• http://www.securityfocus.com/archive/1/305234
• http://www.securityfocus.com/bid/6528