BID:10673

Mbedthis Software AppWeb HTTP Server Multiple Vulnerabilities

Info

Mbedthis Software AppWeb HTTP Server Multiple Vulnerabilities

Bugtraq ID:	10673
Class:	Unknown
CVE:	CVE-2004-2213 CVE-2004-2214 CVE-2004-2317 CVE-2004-2213 CVE-2004-2317 CVE-2004-2214
Remote:	Yes
Local:	No
Published:	Jul 07 2004 12:00AM
Updated:	Mar 19 2015 08:10AM
Credit:	Discovery is credited to Ziv Kamir.
Vulnerable:	Mbedthis Software Mbedthis AppWeb HTTP server 1.1.2 Mbedthis Software Mbedthis AppWeb HTTP server 1.1.1 Mbedthis Software Mbedthis AppWeb HTTP server 1.1 Mbedthis Software Mbedthis AppWeb HTTP server 1.0.4 Mbedthis Software Mbedthis AppWeb HTTP server 1.0.3 Mbedthis Software Mbedthis AppWeb HTTP server 1.0.2 Mbedthis Software Mbedthis AppWeb HTTP server 1.0.1 Mbedthis Software Mbedthis AppWeb HTTP server 1.0

Not Vulnerable:	Mbedthis Software Mbedthis AppWeb HTTP server 1.1.3

Discussion

Mbedthis Software AppWeb HTTP Server Multiple Vulnerabilities

Mbedthis Software AppWeb HTTP Server is reported prone to multiple vulnerabilities that may allow a remote attacker to disclose sensitive information and gain unauthorized access to potentially sensitive resources.

Mbedthis Software AppWeb HTTP Server versions 1.1.2 and prior are affected by these vulnerabilities.

Exploit / POC

Mbedthis Software AppWeb HTTP Server Multiple Vulnerabilities

No exploit is required.

Solution / Fix

Mbedthis Software AppWeb HTTP Server Multiple Vulnerabilities

Solution:
The vendor has released AppWeb 1.1.3 to address these issues.

Mbedthis Software Mbedthis AppWeb HTTP server 1.0