Lucene search

[email protected]CVE-2006-4110

HistoryAug 14, 2006 - 8:04 p.m.

CVE-2006-4110

2006-08-1420:04:00

[email protected]

web.nvd.nist.gov

103

cve

apache 2.2.2

source code disclosure

windows

cgi

nvd

6.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.6%

JSON

Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems.

Affected configurations

NVD

Node

apachehttp_serverMatch2.0.58win32

apachehttp_serverMatch2.2.2windows

apachehttp_serverMatch2.2.3windows

CPENameOperatorVersion
apache:http_serverapache http servereq2.0.58
apache:http_serverapache http servereq2.2.2
apache:http_serverapache http servereq2.2.3

CPE	Name	Operator	Version
apache:http_server	apache http server	eq	2.0.58
apache:http_server	apache http server	eq	2.2.2
apache:http_server	apache http server	eq	2.2.3

References

secunia.com/advisories/21490

securityreason.com/securityalert/1370

www.osvdb.org/27913

www.securityfocus.com/archive/1/442882/100/0/threaded

www.securityfocus.com/archive/1/443487/100/200/threaded

www.securityfocus.com/bid/19447

www.vupen.com/english/advisories/2006/3265

exchange.xforce.ibmcloud.com/vulnerabilities/28357

6.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.6%

JSON

Related for CVE-2006-4110

nvd1 nessus2 debiancve1 cvelist1