medium5.0Public exploit code
CVE-2001-0778
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure2001-05-26 · remote · windows · Verified
Impact
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Omnicron | Omnihttpd | through 2.0.8 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0248.html
- http://www.omnicron.ca/httpd/docs/release.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6621
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0248.html
- http://www.omnicron.ca/httpd/docs/release.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6621