CVE-2004-2317

Technical details for CVE-2004-2317 are not publicly available in the provided documents. No concrete information on affected products, versions, root cause, or impact is present. Monitor for updates from credible sources.

CVE-2004-2316

CVE-2004-2316 affects the Mbedthis AppWeb HTTP server prior to 1.0.2. A remote attacker can crash the server by sending a GET request that contains an MS-DOS device name (e.g., COM1). The available sources confirm the vulnerable software/version and the crash-based impact; no exploit details or c...

CVE-2004-2214

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters...

CVE-2004-2214

The affected component is the Mbedthis AppWeb HTTP server, with versions prior to 1.1.3 vulnerable. The issue allows remote attackers to bypass access restrictions by a URI containing mixed-case characters. Remediation: upgrade to version 1.1.3 or later. No exploit details are provided in the sou...

CVE-2004-2213

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a 1 trailing dot "." or 2 trailing space in an HTTP request...

CVE-2004-2213

CVE-2004-2213 affects the Mbedthis AppWeb HTTP server prior to 1.1.3. An HTTP request containing a trailing dot "." or trailing space can disclose the server-side source code of scripts to a remote attacker. The description indicates the vulnerability path is via crafted requests, enabling partia...

CVE-2004-2317

Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access...

CVE-2004-2213

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a 1 trailing dot "." or 2 trailing space in an HTTP request...

CVE-2004-2315

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via an empty OPTIONS request...

CVE-2004-2214

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters...

CVE-2004-2316

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...

PT-2004-3109 · Embedthis · Mbedthis Appweb Http Server

Name of the Vulnerable Software and Affected Versions: Mbedthis AppWeb HTTP server versions prior to 1.1.3 Description: The issue allows remote attackers to bypass access restrictions via a URI with mixed case characters. Recommendations: For versions prior to 1.1.3, update to version 1.1.3 or...