Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2001-0788: Air Messenger LAN Server reveals its folder path to attackers

CVE-2001-0788 · published 25 years ago

Summary

The Air Messenger LAN Server version 3.4.2 can disclose the exact location of its installation directory through a web response header. Knowing this path helps attackers plan further attacks against the server. Apply the vendor's update or configuration fix to stop the header from exposing the path.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
internet_software_solutions	air_messenger_lan_server	3.4.2 `cpe:2.3:a:internet_software_solutions:air_messenger_lan_server:3.4.2:::::::*`

Original advisory text

Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header.

References

http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html Vendor Advisory
http://www.securityfocus.com/bid/2881 Exploit Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.0 Medium

Exploitation

6% chance of attack within 30 days

Timeline

Published18 Oct 2001

Updated22 Oct 2026

First seen29 Sep 2026

Sources

CVE-2001-0788 · NVD

Track software like this

Free during beta