Description
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.
References
- 10262 vdb-entry
- 20040503 Multible_Vulnerabilites_in_Aldos_Webserver mailing-list
- 11542 third-party-advisory
- 5880 vdb-entry
- aweb-path-disclosure(16047) vdb-entry
- http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt