CVE-2004-1990
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an...
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.
Exploit likelihood
What each source reports
NVD Score used
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.
- Record
CVE-2004-1990- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.
- Record
CVE-2004-1990- Updated
- 2026-11-02
EUVDEUVD-2004-1982 No score
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.
- Record
EUVD-2004-1982- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8c59-r54h-654w No score
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an...
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.
- Record
GHSA-8c59-r54h-654w- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1990 is a medium vulnerability (CVSS 5.0) in Aldo Vargas Aldos Web Server, published March 3, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.54%, the 85th percentile. No source names a fixed version.