CVE-2002-0596 Information

Description

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter which leaks the pathname in an error message.

Reference

http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html http://www.iss.net/security_center/static/8865.php http://www.ngssoftware.com/advisories/wtr.txt http://www.osvdb.org/10447