CVE-2007-3365 MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information (script source code) via a modified exten...
HighCVSS 7.5
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information (script source code) via a modified extension, as demonstrated by post.mscgI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| myserverproject myserver | <= 0.8.9 | No fix listed |
References
- 37505 broken-link vdb-entry
- 25754 broken-link third-party-advisory vendor-advisory
- 2827 third-party-advisory
- 20070621 MyServer-0.8.9 - source code disclosure broken-link mailing-list third-party-advisory vdb-entry
- 24571 broken-link third-party-advisory vdb-entry
- myserver-filenameextension-info-disclosure(34977) third-party-advisory vdb-entry