Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-2006. PoCs published by Marc Schoenefeld.
AI-analyzed exploit summary The exploit demonstrates an information disclosure vulnerability in JBoss WebServer (3.2.x and 4.0.2) by sending malformed HTTP requests to port 8083, revealing installation paths or downloading configuration files due to insufficient input sanitization.
Description
JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a "%." (percent dot), which reveals the installation path or (2) with a % (percent) before a filename, which reveals the contents of the file.
Exploits (1)
The exploit demonstrates an information disclosure vulnerability in JBoss WebServer (3.2.x and 4.0.2) by sending malformed HTTP requests to port 8083, revealing installation paths or downloading configuration files due to insufficient input sanitization.