CVE-2002-0737
Sambar Server - Source Code Disclosure and Denial of Service via URL with Space and Null Character
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-0737. PoCs published by pgrundl.
AI-analyzed exploit summary This exploit leverages a URL parsing vulnerability in Sambar Server to disclose source code of script files by appending a space and null character (%00) to the request. The server fails to properly parse the URL, resulting in an information leak.
Description
Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character.
Exploits (1)
This exploit leverages a URL parsing vulnerability in Sambar Server to disclose source code of script files by appending a space and null character (%00) to the request. The server fails to properly parse the URL, resulting in an information leak.