CVE

Id
16920  
CVE No.
CVE-2006-0816  
Status
Candidate  
Description
Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot) and (2) space characters in the extension of a URL.  
Phase
Assigned (20060221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
137982 16920 CVE-2006-0816 BUGTRAQ:20060323 Secunia Research: Orion Application Server JSP Source DisclosureVulnerability  View
137983 16920 CVE-2006-0816 URL:http://www.securityfocus.com/archive/1/archive/1/428601/100/0/threaded  View
137984 16920 CVE-2006-0816 FULLDISC:20060323 Secunia Research: Orion Application Server JSP Source Disclosure Vulnerability  View
137985 16920 CVE-2006-0816 URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1455.html  View
137986 16920 CVE-2006-0816 MISC:http://secunia.com/secunia_research/2006-11/advisory/  View
137987 16920 CVE-2006-0816 BID:17204  View
137988 16920 CVE-2006-0816 URL:http://www.securityfocus.com/bid/17204  View
137989 16920 CVE-2006-0816 VUPEN:ADV-2006-1055  View
137990 16920 CVE-2006-0816 URL:http://www.vupen.com/english/advisories/2006/1055  View
137991 16920 CVE-2006-0816 OSVDB:24053  View
137992 16920 CVE-2006-0816 URL:http://www.osvdb.org/24053  View
137993 16920 CVE-2006-0816 SECTRACK:1015823  View
137994 16920 CVE-2006-0816 URL:http://securitytracker.com/id?1015823  View
137995 16920 CVE-2006-0816 SECUNIA:18950  View
137996 16920 CVE-2006-0816 URL:http://secunia.com/advisories/18950  View
137997 16920 CVE-2006-0816 XF:orion-jsp-source-disclosure(25405)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60452 JVNDB-2006-002718 MERAK Mail Server および VisNetic MailServer における絶対パスディレクトリトラバーサルの脆弱性 (1) IceWarp Web Mail 以前の Windows 用の MERAK Mail Server および (2) VisNetic MailServer は、validatefolder PHP 関数が適切にサニタイズしないため、絶対パスディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-0818 16920 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002718.html  View