CVE-2004-2317

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access.

Affected (8)

Products: Mbedthis Software: Mbedthis Appweb Http Server

Mbedthis Software

1 product

Mbedthis Appweb Http Server

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mbedthis Software Mbedthis Appweb Http Server	Version 1.0.1
Mbedthis Software Mbedthis Appweb Http Server	Version 1.0.2
Mbedthis Software Mbedthis Appweb Http Server	Version 1.0.3
Mbedthis Software Mbedthis Appweb Http Server	Version 1.0.4
Mbedthis Software Mbedthis Appweb Http Server	Version 1.0
Mbedthis Software Mbedthis Appweb Http Server	Version 1.1.1
Mbedthis Software Mbedthis Appweb Http Server	Version 1.1.2
Mbedthis Software Mbedthis Appweb Http Server	Version 1.1

References (4)

http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/10673

Source: cve@mitre.org

Patch

http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/10673

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.