Exploit F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure

[Exploiter]

EDB-ID

24811

Проверка EDB

1. Пройдено

Автор

[email protected]

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2004-1223

Дата публикации

2004-12-09

F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure

source: https://www.securityfocus.com/bid/11869/info

F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the vulnerable software will return an error message that includes the installation path of the software.

/fsms/fsmsh.dll?