CVE-2007-3407 – SHTTPD 1.38 - Filename Parse Error Information Disclosure

https://notcve.org/view.php?id=CVE-2007-3407

Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) via a URL with a trailing encoded space (%20). Sergey Lyubka Simple HTTPD (shttpd) 1.38 permite a atacantes remotos obtener información sensible (código fuente de secuencias de comandos) mediante un URL con un rastro de espacio codificado (%20). • https://www.exploit-db.com/exploits/30229 http://osvdb.org/37732 http://secunia.com/advisories/25809 http://securityreason.com/securityalert/2832 http://www.securityfocus.com/archive/1/472190/100/0/threaded http://www.securityfocus.com/bid/24618 https://exchange.xforce.ibmcloud.com/vulnerabilities/35038 •