CVE ID:	CVE-2000-1191
Description:	htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2000-1191 BugTraq ID: 4366 http://www.securityfocus.com/bid/4366 http://www.securiteam.com/exploits/htDig_reveals_web_server_configuration_paths.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10526 XForce ISS Database: htdig-htsearch-path-disclosure(7367) https://exchange.xforce.ibmcloud.com/vulnerabilities/7367