Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perception LiteServe CGI源代码泄露漏洞
Vulnerability Description
Perception LiteServe是一款集成HTTP、FTP、SMTP、POP3和TELNET服务的系统。其中HTTP服务支持CGI接口。 Win32平台下的HTTP服务程序处理文件名存在问题,远程攻击者可以利用这个漏洞获得CGI脚本源代码信息。 Win32平台下的LiteServe HTTP服务程序对于特殊文件名处理不正确,攻击者提交带有'.'结尾的文件名请求,可导致服务程序返回CGI脚本的源代码信息给攻击者。造成敏感信息泄露,攻击者可以利用此信息进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A