CVE-2003-0105: PORT80 Software Servermask

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS server.

Affected products

• PORT80 Software Servermask: up to and including 2.2

Published 2004-09-28. Last modified 2026-06-16.