CVE-2011-3694

The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appending a %00 character to a URL.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2011-09-27

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Enterprise Messenger Server (Netsaro)

References

• http://www.solutionary.com/index/SERT/Vuln-Disclosures/NetSaro-Enterprise-Messenger-Source-Code.html