CVE-2005-2008: Yaws Webserver

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null).

Affected products

• Yaws Webserver: version 1.50 only; version 1.51 only; version 1.52 only; version 1.53 only; version 1.54 only; version 1.55 only

Published 2005-06-17. Last modified 2026-06-16.