CVE-2004-2213

UNKNOWN

Mbedthis AppWeb HTTP server before 1

Published Jul 17, 2005

Modified 1 years ago

Details

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) trailing space in an HTTP request.

References

ADVISORY

http://secunia.com/advisories/12011

WEB

http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html

WEB

http://www.osvdb.org/7390

WEB

http://www.securityfocus.com/bid/10673

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/16636

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2004-2213

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

NoneI:N

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:P/I:N/A:N

Ecosystems

Timeline

PublishedJul 17, 2005

ModifiedAug 8, 2024

CVE-2004-2213 | Mondoo Vulnerability Intelligence