medium5.0Public exploit code
CVE-2001-0693
WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebTrends Enterprise Reporting Server 3.1 c/3.5 - Source Code Disclosure2001-06-03 · remote · cgi · Verified
Impact
WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webtrends | Webtrends Enterprise Reporting Server | Version 3.1c |
| Webtrends | Webtrends Enterprise Reporting Server Nt | Version 3.5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=99166905208903&w=2
- http://www.securityfocus.com/bid/2812
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6639
- http://marc.info/?l=bugtraq&m=99166905208903&w=2
- http://www.securityfocus.com/bid/2812
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6639