CVE-2004-2518

Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00") to a URL or (2) an invalid LANGUAGE parameter to web.tmpl, which reveals the full installation path in an error message.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

4.46% chance of exploitation in the next 30 days, 91th percentile

Published

2005-10-25

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/24285
• https://www.exploit-db.com/exploits/24284

References

• CVE Record
• NVD entry

Related

• CVE-2004-2517
• CVE-2004-2519
• CVE-2004-2516
• CVE-2004-2520
• CVE-2004-2514
• CVE-2004-2522