CVE-2003-0456
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
VisNetic WebSite 3.5版本存在漏洞。远程攻击者借助包含不存在文件的请求获取服务器的完整路径名，该漏洞在错误消息中泄漏路径名，比如使用_vti_bin/fcount.exe。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-0456
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using _vti_bin/fpcount.exe.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
VisNetic Website路径泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VisNetic WebSite 3.5版本存在漏洞。远程攻击者借助包含不存在文件的请求获取服务器的完整路径名，该漏洞在错误消息中泄漏路径名，比如使用_vti_bin/fcount.exe。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-0456
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-0456
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-0456 (2)
Mailing List Discussions for CVE-2003-0456 (2)
-
-
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0002.html mailing-list x_refsource_VULNWATCH
Other References for CVE-2003-0456 (1)
-
http://www.krusesecurity.dk/advisories/vis0103.txt x_refsource_MISC
Same Patch Batch · n/a · 2003-07-15 · 12 CVEs total
| CVE-2003-0252 | Linux nfs-utils xlog()远程缓冲区单字节溢出漏洞 | |
| CVE-2003-0465 | Linux Kernel STRNCPY信息泄露漏洞 | |
| CVE-2003-0553 | Netscape Client Detection Tool (CDT)缓冲区溢出漏洞 | |
| CVE-2003-0554 | NeoModus Direct Connect无限请求服务拒绝漏洞 | |
| CVE-2003-0555 | ImageMagick服务拒绝（崩溃）且可能执行任意代码漏洞 | |
| CVE-2003-0556 | Polycom MGC系统远程管理拒绝服务攻击漏洞 | |
| CVE-2003-0557 | LaGarde StoreFront Shopping Cart LOGIN.ASP SQL注入漏洞 | |
| CVE-2003-0558 | LeapFTP缓冲区溢出漏洞 | |
| CVE-2003-0559 | phpforum任意代码执行漏洞 | |
| CVE-2003-0560 | Virtual Programming VP-ASP shopexd.asp SQL注入漏洞 | |
| CVE-2003-0561 | IglooFTP PRO缓冲区溢出漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2003-0456
No comments yet