VULNERABILITY INTELLIGENCE
CVE-2003-1306
CVSS score2.6 LOW
EPSS probability1.28%
CISA KEVNot currently listed
Published2003-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:N/A:N
Description
Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit