CVE-2006-6104

CVE-2006-6104 affects the Mono platform’s XSP/ASP.NET server. The System.Web class does not properly verify local pathnames, allowing remote attackers to read sensitive content: source code by appending a space to a URI, and Web.Config via a Web.Config%20 request. The vulnerability lies in Mono 1...

CVE-2006-2658

CVE-2006-2658 describes a directory traversal vulnerability in the xsp component of mod_mono (Mono/C# web server). It affects SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allowing remote attackers to read arbitrary files via a .. sequence in an HTTP request. Connected sources co...