CVE-2006-0819: High severity Gnome Dwarf Http Server vulnerability
Published Mar 13, 2006
·Updated
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.
Affected Software
1 affected component
Gnome Dwarf Http Server=1.3.2
Remediation
Patch Available
Patch Available
Event History
Mar 13, 2006
CVE Published
07:34 PM
Mar 14, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0819?
CVE-2006-0819 is considered a high-severity vulnerability due to its potential for remote code exposure.
2
How do I fix CVE-2006-0819?
To fix CVE-2006-0819, you should upgrade to a more secure version of Dwarf HTTP Server or implement measures to sanitize filename extensions.
3
Who is affected by CVE-2006-0819?
CVE-2006-0819 affects any deployment of Dwarf HTTP Server version 1.3.2.
4
What type of attack does CVE-2006-0819 enable?
CVE-2006-0819 enables remote attackers to access and potentially download the source code of JSP files.
5
What are the possible input vectors for CVE-2006-0819?
The input vectors for CVE-2006-0819 include variations in the filename extension, such as dot, space, slash, or NULL characters.