CVE-2007-5473 | BDVDB-2026-27111 Detail

Description#

StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/26166
http://osvdb.org/41871
http://secunia.com/advisories/27349
http://anonsvn.mono-project.com/viewcvs/trunk/mcs/class/System.Web/System.Web/StaticFileHandler.cs
https://exchange.xforce.ibmcloud.com/vulnerabilities/37341

Exploit#

No public exploit known

History#

Version 12007-10-18Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.