Description

Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive.

Remediation

References

CVE-2007-6514

Related Vulnerabilities

Oracle JRE CVE-2022-39399 Vulnerability (CVE-2022-39399)

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3963)

WordPress Plugin WP REST API (WP API) Security Bypass (1.2.1)

WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Cross-Site Scripting (1.6.50)

Moodle Improper Check for Dropped Privileges Vulnerability (CVE-2019-14879)

Severity

Medium

Classification

CVE-2007-6514 CWE-200

Tags

Missing Update Known Vulnerabilities