Vulnerabilities > CVE-2006-1391 - Unspecified vulnerability in Pablo Software Solutions Baby ASP web Server and Quick and Easy web Server
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 3 |
References
- http://secunia.com/advisories/19306
- http://secunia.com/advisories/19312
- http://secunia.com/secunia_research/2006-19/advisory/
- http://securityreason.com/securityalert/624
- http://www.osvdb.org/24099
- http://www.osvdb.org/24100
- http://www.securityfocus.com/archive/1/428667/100/0/threaded
- http://www.securityfocus.com/bid/17222
- http://www.vupen.com/english/advisories/2006/1085
- http://www.vupen.com/english/advisories/2006/1088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25417
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25418