CVE-2003-0105 Information disclosure in n/a
ServerMask fails to obfuscate specific HTTP headers, allowing remote attackers to identify the web server as IIS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-0105?
CVE-2003-0105 is a medium-severity vulnerability in n/a, published on 18 Aug 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS server.
Which versions are affected by CVE-2003-0105?
It affects 1 product.
Products include Port80 Software Servermask.
How do I fix CVE-2003-0105?
No fix has been published for CVE-2003-0105 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-0105 being exploited?
There is no known exploitation of CVE-2003-0105 in the wild and no public exploit code.
Sources
Also known as GHSA-xx9h-hw83-5282.