← Back to CVEs
CVE-2002-1677
N/ADescription
14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path.
CVE Details
CVSS v3.1 ScoreN/A
Published12/31/2002
Last Modified4/16/2026
Sourcenvd
Honeypot Sightings0
Affected Products
mrtg:mrtgconfig
References
http://online.securityfocus.com/archive/1/254278(cve@mitre.org)
http://www.securityfocus.com/bid/4021(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/8070(cve@mitre.org)
http://archives.neohapsis.com/archives/bugtraq/2002-01/0421.html(af854a3a-2127-422b-91ae-364da2661108)
http://online.securityfocus.com/archive/1/254278(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/4021(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/8070(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.