CVE-2006-0814

Publicada em 06 mar 2006 · Atualizada em 07 ago 2024

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 11%

probabilidade de exploração

11%top 4% das CVEs

exploração observada

nãonenhuma fonte reporta

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files.

Produtos afetados

n/a · n/a

Referências

http://secunia.com/advisories/18886 http://secunia.com/secunia_research/2006-9/advisory/http://securityreason.com/securityalert/523 http://securitytracker.com/id?1015703 https://exchange.xforce.ibmcloud.com/vulnerabilities/24976 http://trac.lighttpd.net/trac/changeset/1005 http://www.osvdb.org/23542 http://www.securityfocus.com/archive/1/426446/100/0/threaded http://www.securityfocus.com/bid/16893 http://www.vupen.com/english/advisories/2006/0782