CVE-2006-0819 - Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request

Back Back to CVE browser

HIGH

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request

Published Mar 13, 2006

7.8

HIGH

CVSS 2.0

EPSS 2.27%

Description

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://secunia.com/advisories/18962
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/secunia_research/2006-13/advisory
x_refsource_MISCPatchVendor Advisory
http://securityreason.com/securityalert/576
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1015779
vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/23836
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/427478/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17123
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0937
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/25178
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/18962		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/secunia_research/2006-13/advisory		x_refsource_MISCPatchVendor Advisory
http://securityreason.com/securityalert/576		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1015779		vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/23836		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/427478/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17123		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0937		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/25178		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 13, 2006

Updated Aug 7, 2024

Reserved Feb 21, 2006

Link CVE-2006-0819

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0819

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-0819