CVE-2006-1391

EPSS 1.35%
Veröffentlicht 25.03.2006 00:06:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 15

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Pablo Software Solutions ≫ Baby Asp Web Server Version2.7.2

Pablo Software Solutions ≫ Quick And Easy Web Server Version3.0.6

Pablo Software Solutions ≫ Quick And Easy Web Server Version3.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.35%	0.79

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/19306

Patch

Vendor Advisory

http://secunia.com/advisories/19312

Vendor Advisory

http://secunia.com/secunia_research/2006-19/advisory/

Patch

Vendor Advisory

http://securityreason.com/securityalert/624

http://www.osvdb.org/24099

http://www.osvdb.org/24100

Patch

http://www.securityfocus.com/archive/1/428667/100/0/threaded

http://www.securityfocus.com/bid/17222

Patch

http://www.vupen.com/english/advisories/2006/1085

http://www.vupen.com/english/advisories/2006/1088

https://exchange.xforce.ibmcloud.com/vulnerabilities/25417

https://exchange.xforce.ibmcloud.com/vulnerabilities/25418

https://nvd.nist.gov/vuln/detail/CVE-2006-1391

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1391

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1391

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2006-1391