NetSight
medium5.0Public exploit code

CVE-2011-3502

The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) s…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to obtain the source code of executable files via a request with a trailing (1) space or (2) %2e (encoded dot).

Affected products

VendorProductAffected versions
CogentdatahubCogent Datahub
Versions 7.0, 7.0.2, 7.1.0, 7.1.1, 7.1.1.63

Weakness classification

References