1. CVE-Search
  2. CVE-2006-2309
ID CVE-2006-2309
Summary The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.
References
Vulnerable Configurations
  • cpe:2.3:a:etype:eserv:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:etype:eserv:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:etype:eserv:3.25:*:*:*:*:*:*:*
    cpe:2.3:a:etype:eserv:3.25:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 18-10-2018 - 16:39)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:N/A:N
refmap via4
bid 18179
bugtraq 20060531 Secunia Research: Eserv/3 IMAP and HTTP Server MultipleVulnerabilities
confirm http://www.eserv.ru/ru/news/news_detail.php?ID=235
misc http://secunia.com/secunia_research/2006-37/advisory/
secunia 20059
sreason 1006
vupen ADV-2006-2066
xf eserv-file-extension-source-code-disclosure(26741)
Last major update 18-10-2018 - 16:39
Published 02-06-2006 - 00:02
Last modified 18-10-2018 - 16:39
Back to Top