CVE-2008-6528 NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.
MediumCVSS 5.0
EPSS 3.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tmaxsoft jeus | = 5 | No fix listed |
References
- 33123 third-party-advisory vendor-advisory
- 20081212 TmaxSoft JEUS Alternate Data Streams Vulnerability mailing-list
- 20081214 Fwd: TmaxSoft JEUS Alternate Data Streams Vulnerability mailing-list
- 32804 exploit vdb-entry
- jeus-ads-file-disclosure(47303) vdb-entry
- 7442 exploit