document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.Referenceshttp://www.securityfocus.com/bid/2017http://archives.neohapsis.com/archives/bugtraq/2000-11/0384.html
