Verity Ultraseek错误信息路径公开漏洞

https://www.securityfocus.com/bid/10275
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200406-045

VerityUltraseek5.2.2之前的版本存在漏洞。远程攻击者借助web搜寻选项的MS-DOS设备名获得文档根的完全路径名，设备名称如(1)NUL，(2)CON，(3)AUX，(4)COM1，(5)COM2以及其他的。

Verity Inc. Ultraseek 5.2.1

来源:XF
名称:ultraseek-error-path-disclosure(16066)
链接:http://xforce.iss.net/xforce/xfdb/16066
来源:BUGTRAQ
名称:20040505CorsaireSecurityAdvisory-VerityUltraseekpathdisclosureissue
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=108377388114888&w=2
来源:FULLDISC
名称:20040505CorsaireSecurityAdvisory-VerityUltraseekpathdisclosureissue
链接:http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html
来源:VULNWATCH
名称:20040505CorsaireSecurityAdvisory-VerityUltraseekpathdisclosureissue
链接:http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html