CVE-2001-1140

BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2001-08-22

Last modified

2024-08-08

Affected products

• Badblue (Working Resources Inc.)

References

• http://www.securityfocus.com/archive/1/209545
• http://www.securityfocus.com/bid/3222
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7021