|
|
CVE Reference: CVE-2006-2309 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-2309 |
|
|
Description: The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/26741 SREASON http://securityreason.com/securityalert/1006 SAID Secunia Advisory: SA20059 MISC http://secunia.com/secunia_research/2006-37/advisory/ CONFIRM http://www.eserv.ru/ru/news/news_detail.php?ID=235 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/435415/100/0/threaded BID 18179 |
|
| Return to the previous page. |
