document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Net.data | Ibm | 7.0 (including) | 7.0 (including) |
References