CVE-2004-2317

概要

参考情報

• mbedthis.com/products/appWeb/doc/product/newFeatures.html · Patch
• securityfocus.com/bid/10673 · Patch

mbedthis appweb http server のその他の脆弱性

• CVE-2007-3009中 4.3Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the confi…
• CVE-2007-3008中 4.3Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cr…
• CVE-2004-2315中 5.0Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTIONS request.
• CVE-2004-2213中 5.0Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) t…