CVE-2004-0050: Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via...

Security readout for executives and security teams

CVE-2004-0050 is an information disclosure issue in Verity Ultraseek before 5.2.2. A remote user could cause the search feature to reveal the server document-root pathname. This does not prove direct system compromise, but it can expose internal filesystem details useful in later attacks. Exposure is most likely where legacy Verity Ultraseek search interfaces remain internet-accessible or reachable by untrusted users. Asset inventories may miss this because the source bundle lacks CPE data. Treat this as a legacy exposure cleanup item, not an emergency based on the supplied evidence. Prioritize remediation if Ultraseek is public-facing or on sensitive internal systems because path disclosure can support follow-on attacks. Mitigation focus: Identify any Verity Ultraseek deployments and record exact versions.; Upgrade Ultraseek instances older than 5.2.2 where supported.; Check vendor or archival guidance before relying on compensating controls..

Prepared

Jun 30, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.