CVE-2010-2333

Published: Jun 18, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.

Affected (15)

Products: Litespeedtech: Litespeed Web Server

Litespeedtech

1 product

Litespeed Web Server

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Litespeedtech Litespeed Web Server	Version 4.0.10
Litespeedtech Litespeed Web Server	Version 4.0.11
Litespeedtech Litespeed Web Server	Version 4.0.12
Litespeedtech Litespeed Web Server	Version 4.0.13
Litespeedtech Litespeed Web Server	Version 4.0.14
Litespeedtech Litespeed Web Server	Version 4.0.1
Litespeedtech Litespeed Web Server	Version 4.0.2
Litespeedtech Litespeed Web Server	Version 4.0.3
Litespeedtech Litespeed Web Server	Version 4.0.4
Litespeedtech Litespeed Web Server	Version 4.0.5
Litespeedtech Litespeed Web Server	Version 4.0.6
Litespeedtech Litespeed Web Server	Version 4.0.7
Litespeedtech Litespeed Web Server	Version 4.0.8
Litespeedtech Litespeed Web Server	Version 4.0.9
Litespeedtech Litespeed Web Server	Version 4.0