Unscored severity · published Mar 13, 2006
CVE-2006-0819
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DH
Dwarf Http Server · Gnome
1.3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0819
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0819
Patch
http://secunia.com/advisories/18962
Patch
http://secunia.com/secunia_research/2006-13/advisory
securityreason.com
http://securityreason.com/securityalert/576
securitytracker.com
http://securitytracker.com/id?1015779
www.osvdb.org
http://www.osvdb.org/23836
www.securityfocus.com
http://www.securityfocus.com/archive/1/427478/100/0/threaded
More from Dwarf Http Server
–
CVE-2006-0820
Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages