Nokia Electronic Documentation目录信息泄露漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1107485 漏洞类型 未知
发布时间 2003-09-15 更新时间 2003-10-06
CVE编号 CVE-2003-0802 CNNVD-ID CNNVD-200310-011
漏洞平台 Windows CVSS评分 5.0

Nokia Electronic Documentation (NED) is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot (.) to a request for a NED page. Exploitation will also have the side-effect of disclosing the path to the directory.

This issue was reported for NED installations hosted on WebLogic application servers. It is not known if NED is prone to the same behavior when hosted on other servers. It should be noted that although this vulnerability has been reported to affect Nokia Electronic Documentation version 5.0, previous versions might also be affected.
Nokia Electronic Documentation 5.0