Vulnerabilities > CVE-2007-3327 - Information Disclosure vulnerability in Bughunter Http Server 1.6.2

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
bughunter
exploit available
NVD
Published: 2007-06-21
Updated: 2018-10-16

Summary

httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI with a trailing %20 (encoded space).

Vulnerable Configurations

Part Description Count
Application
Bughunter
1

Exploit-Db

descriptionBugHunter HTTP Server 1.6.2 Parse Error Information Disclosure Vulnerability. CVE-2007-3327. Remote exploits for multiple platform
idEDB-ID:30218
last seen2016-02-03
modified2007-06-20
published2007-06-20
reporterPrili
sourcehttps://www.exploit-db.com/download/30218/
titleBugHunter HTTP Server 1.6.2 Parse Error Information Disclosure Vulnerability

References