CVE-2004-1990

Published: Mar 3, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.

Affected (1)

Products: Aldo Vargas: Aldos Web Server

Aldo Vargas

1 product

Aldos Web Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aldo Vargas Aldos Web Server	Version 1.5

References (12)

http://marc.info/?l=bugtraq&m=108360629031227&w=2

Source: cve@mitre.org

http://secunia.com/advisories/11542

Source: cve@mitre.org

ExploitVendor Advisory

http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/5880

Source: cve@mitre.org

http://www.securityfocus.com/bid/10262

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16047

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108360629031227&w=2