12Planet Chat Server 2.5 Error Message Installation Path Disclosure Vulnerability

Exploit Datenbank (exploit-db.com)
CVE Datenbank (cve.mitre.org)
OSVDB Datenbank (osvdb.org)
Wietse Venema 11.04.2003 Verified
Remote Exploits Multiple

Exploit Code

Code Download 
source: http://www.securityfocus.com/bid/7355/info

When certain malformed URL requests are sent to a 12Planet Chat Server, the server's installation path may be revealed in the returned error message. This information could be used by a remote attacker to launch further attacks against the chat server.

http://www.victim.com:8080/qwe/qwe/qwe/index.html