CVE-2006-4110

published 2006-08-14

CVE-2006-4110: Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case)…

medium 4.3 CVSS 3.1

AV N AC M Au N C P I N A N

EXPLOIT

Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
debian	apache2	—	—