CVE-2003-1137
Published Oct 27, 2003
Last updated 7 years ago
Overview
- Description
- Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:charles_steinkuehler:sh-httpd:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2376A70-4291-4AA1-A9EE-9056D4E24138"
},
{
"criteria": "cpe:2.3:a:charles_steinkuehler:sh-httpd:0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF0F9A78-7AE6-4461-9B51-80D00FB6BD71"
}
],
"operator": "OR"
}
]
}
]