CVE-2005-2008

Source
https://cve.org/CVERecord?id=CVE-2005-2008
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2005-2008.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2005-2008
Downstream
Withdrawn
2026-01-27T04:06:01.976757Z
Published
2005-06-17T04:00:00Z
Modified
2026-01-27T04:06:01.976757Z
Summary
[none]
Details

Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null).

References

Affected packages