Description
BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request.
References
- 20010822 -- [ iSecureLabs BadBlue v1.02 beta for Windows 98, ME and 2000 Advisory ] -- mailing-list
- 3222 vdb-entry
- badblue-file-source-disclosure(7021) vdb-entry