CVE Vulnerabilities

CVE-2006-1598

Published: Apr 03, 2006 | Modified: Oct 18, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension.

Affected Software

Name Vendor Start Version End Version
An-httpd An * 1.42n (including)
An-httpd An 1.2b (including) 1.2b (including)
An-httpd An 1.38 (including) 1.38 (including)
An-httpd An 1.39 (including) 1.39 (including)
An-httpd An 1.40 (including) 1.40 (including)
An-httpd An 1.41 (including) 1.41 (including)
An-httpd An 1.41b (including) 1.41b (including)
An-httpd An 1.41c (including) 1.41c (including)

References