VULNERABILITY INTELLIGENCE
CVE-2003-0105
CVSS score5 MEDIUM
EPSS probability2.58%
CISA KEVNot currently listed
Published2004-09-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS server.