CVE-2006-1391

MEDIO 5.0CVE-2006-1391 · Published 25/03/2006 · updated 16/06/2026

In breve

CVE-2006-1391 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda baby asp web server (pablo software solutions), quick and easy web server (pablo software solutions).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 81.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
baby asp web server pablo_software_solutions	`= 2.7.2`	No fix yet
quick and easy web server pablo_software_solutions	`= 3.0.6= 3.1.0`	No fix yet

Description

The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.

References

secunia.com/advisories/19306 · Patch
secunia.com/advisories/19312 · Vendor Advisory
secunia.com/secunia_research/2006-19/advisory · Patch
securityreason.com/securityalert/624
osvdb.org/24099
osvdb.org/24100 · Patch
securityfocus.com/archive/1/428667/100/0/threaded
securityfocus.com/bid/17222 · Patch
vupen.com/english/advisories/2006/1085
vupen.com/english/advisories/2006/1088
exchange.xforce.ibmcloud.com/vulnerabilities/25417
exchange.xforce.ibmcloud.com/vulnerabilities/25418

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free