Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0654. PoCs published by Auriemma Luigi.
AI-analyzed exploit summary This is a writeup describing a path disclosure vulnerability in Apache 2.0.x. The vulnerability can be triggered by requesting specific file types, such as error documents, that fail MIME negotiation, leading to information leakage.
Description
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked.
Exploits (1)
This is a writeup describing a path disclosure vulnerability in Apache 2.0.x. The vulnerability can be triggered by requesting specific file types, such as error documents, that fail MIME negotiation, leading to information leakage.