CVE-2010-2333: Infoleak
Published Jun 18, 2010
·Updated
LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.
Affected Software
15 affected components
Litespeedtech Litespeed Web Server=4.0
Litespeedtech Litespeed Web Server=4.0.1
Litespeedtech Litespeed Web Server=4.0.2
Litespeedtech Litespeed Web Server=4.0.3
Litespeedtech Litespeed Web Server=4.0.4
Litespeedtech Litespeed Web Server=4.0.5
Litespeedtech Litespeed Web Server=4.0.6
Litespeedtech Litespeed Web Server=4.0.7
Litespeedtech Litespeed Web Server=4.0.8
Litespeedtech Litespeed Web Server=4.0.9
Litespeedtech Litespeed Web Server=4.0.10
Litespeedtech Litespeed Web Server=4.0.11
Litespeedtech Litespeed Web Server=4.0.12
Litespeedtech Litespeed Web Server=4.0.13
Litespeedtech Litespeed Web Server=4.0.14
Remediation
Event History
Jun 18, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2333?
CVE-2010-2333 is categorized as having high severity due to its potential to allow unauthorized access to script source code.
2
How do I fix CVE-2010-2333?
To mitigate CVE-2010-2333, upgrade LiteSpeed Web Server to version 4.0.15 or later.
3
What systems are affected by CVE-2010-2333?
CVE-2010-2333 affects LiteSpeed Web Server versions 4.0.x prior to 4.0.15.
4
What types of attacks are possible with CVE-2010-2333?
CVE-2010-2333 allows remote attackers to exploit the vulnerability to read sensitive source code via specially crafted HTTP requests.
5
Is CVE-2010-2333 still a concern today?
While CVE-2010-2333 has been addressed in later software updates, any systems still running the vulnerable versions remain at risk.