CVE-2010-2333

{"id": "CVE-2010-2333", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-06-18T20:30:01.360", "references": [{"url": "http://osvdb.org/65476", "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2010/Jun/288", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/40128", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/13850", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.litespeedtech.com/latest/litespeed-web-server-4.0.15-released.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.litespeedtech.com/support/forum/showthread.php?t=4078", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/40815", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/65476", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2010/Jun/288", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/40128", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.exploit-db.com/exploits/13850", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.litespeedtech.com/latest/litespeed-web-server-4.0.15-released.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.litespeedtech.com/support/forum/showthread.php?t=4078", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/40815", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension."}, {"lang": "es", "value": "LiteSpeed Technologies LiteSpeed Web Server v4.0.x anteriores a 4.0.15 permite a atacantes remotos leer el c\u00f3digo fuente de los scripts a trav\u00e9s de una petici\u00f3n HTTP con un byte null seguido de una extensi\u00f3n .txt."}], "lastModified": "2024-11-21T01:16:26.183", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "035D50F1-7C8A-4550-A39F-028285279EF0"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5A81425-0171-49BF-905C-5A9899A9D372"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8452B05E-5013-435B-843F-ADA48F088E25"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB15E1FF-8D4D-43B0-8F62-C560B5E8E6C2"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59F6DAB4-E722-4E47-A478-6B4D04D4E7C3"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "668A27E4-5ABF-4964-BFC0-B8AE89E1AC0A"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9215B6F4-2E11-4F0F-8CD1-12D7F704195E"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85331916-B4FA-4D6E-9E78-EAD8EC62951E"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6951C57-8FCD-41B7-AD11-72E4C5C15404"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6E43590-1266-4AEA-9A2F-2E3C3CC3E734"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45E50202-3A8A-4D75-A0E4-7EDAD2032943"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFB9719F-095C-4808-902A-28FE8E18E1A5"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "685A53F1-0C22-4EC9-8394-073BDDF774D2"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67EFFE5C-4632-479B-A75E-68EF51ECEEAF"}, {"criteria": "cpe:2.3:a:litespeedtech:litespeed_web_server:4.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B81FB80A-19AA-4706-B3FE-481E76909D00"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}