Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| E-gap | Whale_communications | 2.5 (including) | 2.5 (including) |
References
- http://www.kb.cert.org/vuls/id/371470
- http://www.procheckup.com/security_info/vuln_pr0307.html
- http://www.securityfocus.com/bid/9431
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14869
- http://www.kb.cert.org/vuls/id/371470
- http://www.procheckup.com/security_info/vuln_pr0307.html
- http://www.securityfocus.com/bid/9431
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14869