Vulnerabilities > CVE-2006-2309 - Input Validation vulnerability in Etype Eserv 3.0/3.25

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
etype
NVD
Published: 2006-06-02
Updated: 2018-10-18

Summary

The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.

Vulnerable Configurations

Part Description Count
Application
Etype
2

References