OSVDB ID: 4231

Title: Apache Cocoon Error Page Server Path Disclosure

Info

Disclosure
Mar 13, 2004

Discovery
Unknown

Dates

Exploit
Jan 01, 2003

Solution
Unknown

Description

 Apache Cocoon contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the error page is displayed, which will disclose the physical path of the web server information resulting in a loss of confidentiality.

Classification

 Location: Remote / Network Access
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Exploit: Exploit Public
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Apache Software Foundation

Cocoon

 1.7.4
2.1.4

References

Credit
  • Sullo - sullocirt.net - cirt.net


Direct URL: http://osvdb.org/4231