CVE-2001-0778 OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).
MediumCVSS 5.0
EPSS 6.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| omnicron omnihttpd | <= 2.0.8 | No fix listed |
References
- 20010525 Remote vulnerabilities in OmniHTTPd exploit mailing-list vendor-advisory
- www.omnicron.ca
- omnihttpd-reveal-source-code(6621) vdb-entry