ServerMask 2.2 and earlier does not obfuscate 1 ETag, 2 HTTP Status Message, or 3 Allow HTTP responses, which could tell remote attackers that the web server is an IIS server...
5CVSS6.7AI score0.02578EPSS
SaveExploits1References3
Cvelist•added 2004/08/18 4:0 a.m.•34 views
CVE-2003-0105
ServerMask 2.2 and earlier does not obfuscate 1 ETag, 2 HTTP Status Message, or 3 Allow HTTP responses, which could tell remote attackers that the web server is an IIS server...
