Required CVE Record Information
Description
document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.
References 2 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- securityfocus.com: 2017 vdb-entryx_transferred
- archives.neohapsis.com: 20001128 IBM Net.Data Local Path Disclosure Vulnerability? mailing-listx_transferred