CVE-2006-1391

The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2006-03-25

Last modified

2024-08-07

Affected products

• Baby Asp Web Server (Pablo Software Solutions)
• Quick And Easy Web Server (Pablo Software Solutions)

References

• http://secunia.com/advisories/19306
• http://secunia.com/advisories/19312
• http://secunia.com/secunia_research/2006-19/advisory/
• http://securityreason.com/securityalert/624
• http://www.osvdb.org/24099
• http://www.osvdb.org/24100
• http://www.securityfocus.com/archive/1/428667/100/0/threaded
• http://www.securityfocus.com/bid/17222
• http://www.vupen.com/english/advisories/2006/1085
• http://www.vupen.com/english/advisories/2006/1088
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25417
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25418