CVE

Id
20214  
CVE No.
CVE-2006-4110  
Status
Candidate  
Description
Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187395 20214 CVE-2006-4110 BUGTRAQ:20060809 CGI Script Source Code Disclosure Vulnerability in Apache for Windows  View
187396 20214 CVE-2006-4110 URL:http://www.securityfocus.com/archive/1/archive/1/442882/100/0/threaded  View
187397 20214 CVE-2006-4110 BUGTRAQ:20060817 Re: Re: CGI Script Source Code Disclosure Vulnerability in Apache for Windows  View
187398 20214 CVE-2006-4110 URL:http://www.securityfocus.com/archive/1/archive/1/443487/100/200/threaded  View
187399 20214 CVE-2006-4110 BID:19447  View
187400 20214 CVE-2006-4110 URL:http://www.securityfocus.com/bid/19447  View
187401 20214 CVE-2006-4110 VUPEN:ADV-2006-3265  View
187402 20214 CVE-2006-4110 URL:http://www.vupen.com/english/advisories/2006/3265  View
187403 20214 CVE-2006-4110 OSVDB:27913  View
187404 20214 CVE-2006-4110 URL:http://www.osvdb.org/27913  View
187405 20214 CVE-2006-4110 SECUNIA:21490  View
187406 20214 CVE-2006-4110 URL:http://secunia.com/advisories/21490  View
187407 20214 CVE-2006-4110 SREASON:1370  View
187408 20214 CVE-2006-4110 URL:http://securityreason.com/securityalert/1370  View
187409 20214 CVE-2006-4110 XF:apache-modalias-information-disclosure(28357)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60749 JVNDB-2006-003015 Ruby on Rails の "依存型分類メカニズム" における任意の Ruby コードを実行される脆弱性 Ruby on Rails の "依存型分類メカニズム" は、ルーティングコード内で URL を適切に処理しないため、任意の Ruby コードを実行される脆弱性が存在します。 CVE-2006-4112 20214 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003015.html  View