First published: Fri Dec 31 2004(Updated: )
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) trailing space in an HTTP request.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mbedthis AppWeb HTTP server | =1.0 | |
Mbedthis AppWeb HTTP server | =1.0.1 | |
Mbedthis AppWeb HTTP server | =1.0.2 | |
Mbedthis AppWeb HTTP server | =1.0.3 | |
Mbedthis AppWeb HTTP server | =1.0.4 | |
Mbedthis AppWeb HTTP server | =1.1 | |
Mbedthis AppWeb HTTP server | =1.1.1 | |
Mbedthis AppWeb HTTP server | =1.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-2213 is considered a medium severity vulnerability due to its ability to expose sensitive source code to remote attackers.
To fix CVE-2004-2213, upgrade the Mbedthis AppWeb HTTP server to version 1.1.3 or later.
CVE-2004-2213 allows attackers to obtain the source code for scripts by crafting specific HTTP requests.
CVE-2004-2213 affects Mbedthis AppWeb HTTP server versions 1.0 through 1.1.2.
CVE-2004-2213 poses a risk only to systems running the affected versions of Mbedthis AppWeb HTTP server that have not been updated.