Lucene search

MitreCVE-2009-4529

HistoryDec 31, 2009 - 7:30 p.m.

CVE-2009-4529

2009-12-3119:30:00

CWE-200

mitre

web.nvd.nist.gov

cve-2009-4529

intervations navicopa

web server

source code exposure

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.115

Percentile

95.3%

JSON

InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs.

Affected configurations

Nvd

Node

intervationsnavicopa_web_serverRange≤3.0.1.2

intervationsnavicopa_web_serverMatch2.01

intervationsnavicopa_web_serverMatch3.01

VendorProductVersionCPE
intervationsnavicopa_web_server*cpe:2.3:a:intervations:navicopa_web_server:*:*:*:*:*:*:*:*
intervationsnavicopa_web_server2.01cpe:2.3:a:intervations:navicopa_web_server:2.01:*:*:*:*:*:*:*
intervationsnavicopa_web_server3.01cpe:2.3:a:intervations:navicopa_web_server:3.01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intervations	navicopa_web_server	*	cpe:2.3:a:intervations:navicopa_web_server::::::::
intervations	navicopa_web_server	2.01	cpe:2.3:a:intervations:navicopa_web_server:2.01:::::::*
intervations	navicopa_web_server	3.01	cpe:2.3:a:intervations:navicopa_web_server:3.01:::::::*

References

freetexthost.com/n5l0h34pxc

osvdb.org/58949

pocoftheday.blogspot.com/2009/10/navicopa-web-server-3012-remote-source.html

secunia.com/advisories/37014

www.packetstormsecurity.org/0910-exploits/navicopa-disclose.txt

www.securityfocus.com/bid/36705

www.vupen.com/english/advisories/2009/2927

exchange.xforce.ibmcloud.com/vulnerabilities/53799

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.115

Percentile

95.3%

JSON

Related for CVE-2009-4529