CVE-2004-0050

NONE EPSS 69.0%

Published Jun 14, 200422y ago · Modified Jun 16, 20262w ago

Published Jun 14, 2004 22y ago

Last Modified Jun 16, 2026 2w ago

Description

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.

Threat Intelligence

EPSS Exploit Probability

69.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Affected Products 1

Vendor	Product	Version	Range
verity	ultraseek	*	≤5.2.1

References 4

archives.neohapsis.com http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html

Vendor Advisory
lists.grok.org.uk http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html
marc.info http://marc.info/?l=bugtraq&m=108377388114888&w=2
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/16066

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.