CVE

Id
7961  
CVE No.
CVE-2003-1137  
Status
Candidate  
Description
Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
47888 7961 CVE-2003-1137 BUGTRAQ:20031027 sh-httpd `wildcard character" vulnerability  View
47889 7961 CVE-2003-1137 URL:http://www.securityfocus.com/archive/1/342473  View
47890 7961 CVE-2003-1137 BUGTRAQ:20031028 Re: sh-httpd `wildcard character" vulnerability  View
47891 7961 CVE-2003-1137 URL:http://www.securityfocus.com/archive/1/342766  View
47892 7961 CVE-2003-1137 BID:8897  View
47893 7961 CVE-2003-1137 URL:http://www.securityfocus.com/bid/8897  View
47894 7961 CVE-2003-1137 XF:shtttpd-get-information-disclosure(13519)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63598 JVNDB-2003-000324 Red Hat Linux の Apache HTTP Server における機密情報漏洩の脆弱性 Red Hat Linux に含まれる Apache HTTP Server のデフォルトの設定において、ドキュメントルート ( デフォルトでは /var/www/html/) に index.html を作成していない場合、"//" を含む URI に対する妥当性の確認が適切に行われていない脆弱性が存在します。 CVE-2003-1138 7961 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000324.html  View