DSquare Exploit Pack: D2SEC_LIGHTTPD2

Name| d2seclighttpd2 ---|--- CVE| CVE-2006-0814 Exploit Pack| D2ExploitPack Description| Lighttpd Script Source Disclosure Notes|...

CVE-2006-0814

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing 1 "." dot and 2 space characters, which are ignored by Windows, as demonstrated by PHP files...