Vulnerability in Ohio State University Osu Httpd

CVE-2006-4908

OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL containing an * (asterisk) wildcard, which displays all matching file and directory information.

EPSS: 0.021 (79.7th percentile) — read the EPSS interpretation.

Affected products

Ohio_state_university Osu_httpd — versions 3.10a, 3.11alpha
N/a — versions n/a

References

cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)