CVE-2004-0050: Verity Ultraseek

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.

Affected products

• Verity Ultraseek: up to and including 5.2.1

Published 2004-06-14. Last modified 2026-06-16.