CVE-2006-0949

Impact

RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving (1) "." (dot), (2) space, and (3) "/" (slash) characters.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/19032
• http://secunia.com/secunia_research/2006-15/advisory/
• http://www.osvdb.org/23616
• http://www.securityfocus.com/bid/16934
• http://www.vupen.com/english/advisories/2006/0807
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25037
• http://secunia.com/advisories/19032
• http://secunia.com/secunia_research/2006-15/advisory/
• http://www.osvdb.org/23616
• http://www.securityfocus.com/bid/16934
• http://www.vupen.com/english/advisories/2006/0807
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25037