Test ID:	1.3.6.1.4.1.25623.1.0.12300
Category:	Web application abuses
Title:	Inktomi Search Physical Path Disclosure
Summary:	This web server is running a vulnerable version of Inktomi Search.
Description:	Summary: This web server is running a vulnerable version of Inktomi Search. Vulnerability Impact: Certain requests using MS-DOS special file names such as nul can cause a python error. The error message contains sensitive information such as the physical path of the webroot. This information may be useful to an attacker. Solution: Upgrade to the latest version. This product is now developed by Verity and is called Ultraseek CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	BugTraq ID: 10275 BugTraq ID: 8050 Common Vulnerability Exposure (CVE) ID: CVE-2004-0050 Bugtraq: 20040505 Corsaire Security Advisory - Verity Ultraseek path disclosure issue (Google Search) http://marc.info/?l=bugtraq&m=108377388114888&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html XForce ISS Database: ultraseek-error-path-disclosure(16066) https://exchange.xforce.ibmcloud.com/vulnerabilities/16066
Copyright	Copyright (C) 2004 Westpoint Limited and Corsaire Limited

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.