Description

Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked.

Remediation

References

CVE-2002-0654

Related Vulnerabilities

Squid Operation on a Resource after Expiration or Release Vulnerability (CVE-2024-23638)

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-43407)

WebLogic Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5397)

WordPress Plugin Rise Blocks-A Complete Gutenberg Page Builder Unspecified Vulnerability (1.0.0)

Telerik Web UI Inadequate Encryption Strength Vulnerability (CVE-2017-11317)

Severity

Medium

Classification

CVE-2002-0654

Tags

Missing Update Known Vulnerabilities