Search
Find a vulnerability
Search criteria
4 vulnerabilities found for dwarf_http_server by gnome
CVE-2006-0820 (GCVE-0-2006-0820)
Vulnerability from nvd – Published: 2006-03-13 19:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0937 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015779 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/17123 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/23837 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/427478/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/secunia_research/2006-13/advisory | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/18962 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-03-13 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.144Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0937",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "23837",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23837"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "dwarfhttp-url-xss(25179)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25179"
},
{
"name": "18962",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18962"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0937",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "23837",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23837"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "dwarfhttp-url-xss(25179)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25179"
},
{
"name": "18962",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18962"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0820",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0937",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "23837",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23837"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"name": "http://secunia.com/secunia_research/2006-13/advisory",
"refsource": "MISC",
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "dwarfhttp-url-xss(25179)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25179"
},
{
"name": "18962",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18962"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0820",
"datePublished": "2006-03-13T19:00:00.000Z",
"dateReserved": "2006-02-21T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.144Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0819 (GCVE-0-2006-0819)
Vulnerability from nvd – Published: 2006-03-13 19:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0937 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015779 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/17123 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/427478/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/secunia_research/2006-13/advisory | x_refsource_MISC |
| http://www.osvdb.org/23836 | vdb-entryx_refsource_OSVDB |
| http://securityreason.com/securityalert/576 | third-party-advisoryx_refsource_SREASON |
| http://secunia.com/advisories/18962 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-03-13 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.443Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0937",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "dwarfhttp-extension-information-disclosure(25178)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25178"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "23836",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23836"
},
{
"name": "576",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/576"
},
{
"name": "18962",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18962"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0937",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "dwarfhttp-extension-information-disclosure(25178)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25178"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "23836",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23836"
},
{
"name": "576",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/576"
},
{
"name": "18962",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18962"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0819",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0937",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "dwarfhttp-extension-information-disclosure(25178)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25178"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"name": "http://secunia.com/secunia_research/2006-13/advisory",
"refsource": "MISC",
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "23836",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23836"
},
{
"name": "576",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/576"
},
{
"name": "18962",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18962"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0819",
"datePublished": "2006-03-13T19:00:00.000Z",
"dateReserved": "2006-02-21T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.443Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0820 (GCVE-0-2006-0820)
Vulnerability from cvelistv5 – Published: 2006-03-13 19:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0937 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015779 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/17123 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/23837 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/427478/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/secunia_research/2006-13/advisory | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/18962 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-03-13 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.144Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0937",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "23837",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23837"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "dwarfhttp-url-xss(25179)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25179"
},
{
"name": "18962",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18962"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0937",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "23837",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23837"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "dwarfhttp-url-xss(25179)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25179"
},
{
"name": "18962",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18962"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0820",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0937",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "23837",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23837"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"name": "http://secunia.com/secunia_research/2006-13/advisory",
"refsource": "MISC",
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "dwarfhttp-url-xss(25179)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25179"
},
{
"name": "18962",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18962"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0820",
"datePublished": "2006-03-13T19:00:00.000Z",
"dateReserved": "2006-02-21T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.144Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0819 (GCVE-0-2006-0819)
Vulnerability from cvelistv5 – Published: 2006-03-13 19:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0937 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015779 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/17123 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/427478/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/secunia_research/2006-13/advisory | x_refsource_MISC |
| http://www.osvdb.org/23836 | vdb-entryx_refsource_OSVDB |
| http://securityreason.com/securityalert/576 | third-party-advisoryx_refsource_SREASON |
| http://secunia.com/advisories/18962 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-03-13 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.443Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0937",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "dwarfhttp-extension-information-disclosure(25178)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25178"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "23836",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23836"
},
{
"name": "576",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/576"
},
{
"name": "18962",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18962"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-13T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0937",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "dwarfhttp-extension-information-disclosure(25178)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25178"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "23836",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23836"
},
{
"name": "576",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/576"
},
{
"name": "18962",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18962"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0819",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0937",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0937"
},
{
"name": "1015779",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015779"
},
{
"name": "17123",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17123"
},
{
"name": "dwarfhttp-extension-information-disclosure(25178)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25178"
},
{
"name": "20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/427478/100/0/threaded"
},
{
"name": "http://secunia.com/secunia_research/2006-13/advisory",
"refsource": "MISC",
"url": "http://secunia.com/secunia_research/2006-13/advisory"
},
{
"name": "23836",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23836"
},
{
"name": "576",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/576"
},
{
"name": "18962",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18962"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0819",
"datePublished": "2006-03-13T19:00:00.000Z",
"dateReserved": "2006-02-21T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.443Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}