Description
The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.
References
- 17222 vdb-entry
- 19312 third-party-advisory
- 20060324 Secunia Research: Quick 'n Easy/Baby Web Server ASP CodeDisclosure Vulnerability mailing-list
- ADV-2006-1085 vdb-entry
- quickneasy-web-asp-disclosure(25418) vdb-entry
- 24100 vdb-entry
- 24099 vdb-entry
- 624 third-party-advisory
- baby-web-asp-disclosure(25417) vdb-entry
- 19306 third-party-advisory
- http://secunia.com/secunia_research/2006-19/advisory/
- ADV-2006-1088 vdb-entry