CVE-2004-1678

CVE-2004-1678 describes a directory traversal vulnerability in pdesk.cgi within PerlDesk, allowing remote attackers to read portions of arbitrary files and potentially execute arbitrary Perl modules. This is achieved by manipulating the 'lang' parameter with ".." sequences terminated by a null character, which can leak file contents through compilation error messages. With a CVSS score of 5.0, this vulnerability has a low attack complexity and requires no authentication, posing a risk of partial confidentiality compromise. While not listed in CISA KEV, an exploit for server-side script execution exists on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.