CVE-2005-2008: Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null)

Description

Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null).

Exploitation

Is it being used?

Exploit prediction (EPSS)1.5% · higher than 73% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

WE

Webserver · Yaws

1.50; 1.51; 1.52; 1.53; 1.54; 1.55 · source: NVD