CVE-2004-1677

pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-09-12

Last modified

2024-08-08

Affected products

• Perldesk (Logicnow)

References

• http://marc.info/?l=bugtraq&m=109509026406554&w=2
• http://secunia.com/advisories/12512
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17343