Description
AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension.
References
- 24323 vdb-entry
- 20060403 Secunia Research: AN HTTPD Script Source Disclosure Vulnerability mailing-list
- 19326 third-party-advisory
- 1015858 vdb-entry
- http://secunia.com/secunia_research/2006-21/advisory
- anhttpd-script-source-disclosure(25591) vdb-entry
- ADV-2006-1200 vdb-entry
- 17350 vdb-entry