Exploit Roxen WebServer 2.0.x - '%00' Request File/Directory Disclosure

[Exploiter]

EDB-ID

20104

Проверка EDB

1. Пройдено

Автор

ZORGON

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

cve-2000-0671

Дата публикации

2000-07-21

source: https://www.securityfocus.com/bid/1510/info

If a request containing the null character (%00) is made to the Roxen Web Server, the server will return directory contents, and the source of unparsed scripts and html pages.

For example, a request to
http://www.server.com/%00

Will return the contents of the server's document root directory.

Versions of Roxen WebServer 2.0 prior to 2.0.69 are affected.