Content-Type Header Misconfiguration in SmarterTools SmarterStats Web Server

CVE-2011-2158

What is CVE-2011-2158?

The SmarterTools SmarterStats 6.0 web server is susceptible to a vulnerability where it sends incorrect Content-Type headers, potentially leading to exploitation through various resources. Attackers may trigger issues involving admin pages and other user-facing content, such as reports and specific file types, which can result in an interpretation conflict. This misconfiguration could allow unauthorized remote actions or access to sensitive information, as it might affect how the web server processes and delivers content.

References