CVE-2004-1990

N/A

Descricao

Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado3/3/2004

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

aldo_vargas:aldos_web_server

Referencias

http://marc.info/?l=bugtraq&m=108360629031227&w=2(cve@mitre.org)

http://secunia.com/advisories/11542(cve@mitre.org)

http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt(cve@mitre.org)

http://www.osvdb.org/5880(cve@mitre.org)

http://www.securityfocus.com/bid/10262(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16047(cve@mitre.org)

http://marc.info/?l=bugtraq&m=108360629031227&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/11542(af854a3a-2127-422b-91ae-364da2661108)

http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/5880(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/10262(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16047(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.