CVE-2006-1391

Summary

The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/17222
• http://secunia.com/advisories/19312
• http://www.securityfocus.com/archive/1/428667/100/0/threaded
• http://www.vupen.com/english/advisories/2006/1085
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25418
• http://www.osvdb.org/24100
• http://www.osvdb.org/24099
• http://securityreason.com/securityalert/624
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25417
• http://secunia.com/advisories/19306
• http://secunia.com/secunia_research/2006-19/advisory/
• http://www.vupen.com/english/advisories/2006/1088

References

• http://www.securityfocus.com/bid/17222
• http://secunia.com/advisories/19312
• http://www.securityfocus.com/archive/1/428667/100/0/threaded
• http://www.vupen.com/english/advisories/2006/1085
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25418
• http://www.osvdb.org/24100
• http://www.osvdb.org/24099
• http://securityreason.com/securityalert/624
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25417
• http://secunia.com/advisories/19306
• http://secunia.com/secunia_research/2006-19/advisory/
• http://www.vupen.com/english/advisories/2006/1088

• ←Previous
• Next→