CVE-2006-0819

Published: Mar 13, 2006Modified: Apr 16, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.

Affected (1)

Products: Gnome: Dwarf Http Server

Gnome

1 product

Dwarf Http Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnome Dwarf Http Server	Version 1.3.2

References (18)

http://secunia.com/advisories/18962

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/secunia_research/2006-13/advisory

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/576

Source: cve@mitre.org

http://securitytracker.com/id?1015779

Source: cve@mitre.org

http://www.osvdb.org/23836

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/427478/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17123

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0937

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25178

Source: cve@mitre.org

http://secunia.com/advisories/18962