CVE

Id
16918  
CVE No.
CVE-2006-0814  
Status
Candidate  
Description
response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files.  
Phase
Assigned (20060221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
137954 16918 CVE-2006-0814 BUGTRAQ:20060301 Secunia Research: Lighttpd Script Source Disclosure Vulnerability  View
137955 16918 CVE-2006-0814 URL:http://www.securityfocus.com/archive/1/archive/1/426446/100/0/threaded  View
137956 16918 CVE-2006-0814 MISC:http://secunia.com/secunia_research/2006-9/advisory/  View
137957 16918 CVE-2006-0814 CONFIRM:http://trac.lighttpd.net/trac/changeset/1005  View
137958 16918 CVE-2006-0814 BID:16893  View
137959 16918 CVE-2006-0814 URL:http://www.securityfocus.com/bid/16893  View
137960 16918 CVE-2006-0814 VUPEN:ADV-2006-0782  View
137961 16918 CVE-2006-0814 URL:http://www.vupen.com/english/advisories/2006/0782  View
137962 16918 CVE-2006-0814 OSVDB:23542  View
137963 16918 CVE-2006-0814 URL:http://www.osvdb.org/23542  View
137964 16918 CVE-2006-0814 SECTRACK:1015703  View
137965 16918 CVE-2006-0814 URL:http://securitytracker.com/id?1015703  View
137966 16918 CVE-2006-0814 SECUNIA:18886  View
137967 16918 CVE-2006-0814 URL:http://secunia.com/advisories/18886  View
137968 16918 CVE-2006-0814 SREASON:523  View
137969 16918 CVE-2006-0814 URL:http://securityreason.com/securityalert/523  View
137970 16918 CVE-2006-0814 XF:lighttpd-source-code-disclosure(24976)  View

Related JVN