PT-2006-2491 · Blazix · Blazix Web Server

Tan Chew Keong

·

CVE-2006-1483

·

Published

2006-03-29

·

Updated

2018-10-18

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Blazix Web Server versions prior to 1.2.6
Description: The issue allows remote attackers to obtain the source code of JSP files by manipulating the URL extension with certain characters, including (1) dot, (2) space, and (3) slash.
Recommendations: For versions prior to 1.2.6, update to version 1.2.6 or later to resolve the issue.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2006-1483

Affected Products

Blazix Web Server