Detections
Analytics
NaviCOPA Encoded Space Request Source Code Disclosure
medium Nessus Plugin ID 42150
Language:
Synopsis
The remote web server is affected by a source code disclosure vulnerability.Description
The installed version of the NaviCOPA web server software on the remote host returns the source of scripts hosted on it when '%20' is appended to the request URL. A remote attacker can leverage this issue to view the source code of CGIs and possibly obtain passwords and other sensitive information from this host.Solution
Unknown at this time.See Also
http://freetexthost.com/n5l0h34pxc
https://packetstormsecurity.com/0910-exploits/navicopa-disclose.txt
Plugin Details
Severity: Medium
ID: 42150
File Name: navicopa_source_space.nasl
Version: 1.12
Type: remote
Family: Web Servers
Published: 10/15/2009
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.5
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
Required KB Items: www/PHP
Exploit Ease: No known exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 10/14/2009
Reference Information
CVE: CVE-2009-4529
BID: 36705