CVE-2002-0596

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.

• CWE-200

• http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.htmlVendor Advisory
• http://www.iss.net/security_center/static/8865.phpPatch, Vendor Advisory
• http://www.ngssoftware.com/advisories/wtr.txt
• http://www.osvdb.org/10447
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.htmlVendor Advisory
• http://www.iss.net/security_center/static/8865.phpPatch, Vendor Advisory
• http://www.ngssoftware.com/advisories/wtr.txt
• http://www.osvdb.org/10447

Published

Jun 18, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0590Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Bet…
• CVE-2002-0591Directory traversal vulnerability in AOL Instant Messenger (…
• CVE-2002-0592AOL Instant Messenger (AIM) allows remote attackers to steal…
• CVE-2002-0593Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlie…
• CVE-2002-0594Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote att…
• CVE-2002-0595Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrend…
• CVE-2002-0597LANMAN service on Microsoft Windows 2000 allows remote attac…
• CVE-2002-0598Format string vulnerability in Foundstone FScan 1.12 with ba…
• CVE-2002-0599Blahz-DNS 0.2 and earlier allows remote attackers to bypass …
• CVE-2002-0600Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allow…
• CVE-2002-0601ISS RealSecure Network Sensor 5.x through 6.5 allows remote …
• CVE-2002-0602Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attack…