Vulnerabilities > CVE-2001-1248 - Unspecified vulnerability in Vwebserver 1.2.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
vwebserver
nessus
NVD
Published: 2001-06-29
Updated: 2008-09-10

Summary

vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20).

Vulnerable Configurations

Part Description Count
Application
Vwebserver
1

Nessus

NASL familyWeb Servers
NASL idASP_SOURCE_SPACE.NASL
descriptionIt appears possible to get the source code of the remote ASP scripts by appending a
last seen2020-06-01
modified2020-06-02
plugin id11071
published2002-08-14
reporterThis script is Copyright (C) 2002-2018 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/11071
titleMultiple Web Server Encoded Space (%20) Request ASP Source Disclosure

References