CVE-2006-0819

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-13 · updated 2026-06-16

Description

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.

Affected products

GNOME Dwarf Http Server: 1.3.2

References

http://secunia.com/advisories/18962
http://secunia.com/secunia_research/2006-13/advisory
http://securityreason.com/securityalert/576
http://securitytracker.com/id?1015779
http://www.osvdb.org/23836
http://www.securityfocus.com/archive/1/427478/100/0/threaded
http://www.securityfocus.com/bid/17123
http://www.vupen.com/english/advisories/2006/0937
https://exchange.xforce.ibmcloud.com/vulnerabilities/25178
http://secunia.com/advisories/18962
http://secunia.com/secunia_research/2006-13/advisory
http://securityreason.com/securityalert/576

Get alerted when CVE-2006-0819 or the next vulnerability affects your stack