ID de Prueba:	1.3.6.1.4.1.25623.1.0.12300
Categoría:	Web application abuses
Título:	Inktomi Search Physical Path Disclosure
Resumen:	This web server is running a vulnerable version of Inktomi Search.
Descripción:	Summary: This web server is running a vulnerable version of Inktomi Search. Vulnerability Impact: Certain requests using MS-DOS special file names such as nul can cause a python error. The error message contains sensitive information such as the physical path of the webroot. This information may be useful to an attacker. Solution: Upgrade to the latest version. This product is now developed by Verity and is called Ultraseek CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0050 Bugtraq: 20040505 Corsaire Security Advisory - Verity Ultraseek path disclosure issue (Google Search) http://marc.info/?l=bugtraq&m=108377388114888&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html XForce ISS Database: ultraseek-error-path-disclosure(16066) https://exchange.xforce.ibmcloud.com/vulnerabilities/16066
Copyright	Copyright (C) 2004 Westpoint Limited and Corsaire Limited

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.