Test ID:	10479
Category:	CGI abuses
Title:	Roxen Server /%00/ bug
Summary:	NOSUMMARY
Description:	Description: Requesting a URL with '/%00/' appended to it makes some Roxen servers dump the listing of the page directory, thus showing potentially sensitive files. An attacker may also use this flaw to view the source code of RXML files, Pike scripts or CGIs. Under some circumstances, information protected by .htaccess files might be revealed. Risk factor : High Solution : upgrade to the latest version of Roxen
Cross-Ref:	BugTraq ID: 1510 Common Vulnerability Exposure (CVE) ID: CVE-2000-0671 http://www.securityfocus.com/bid/1510 Bugtraq: 20000721 Roxen Web Server Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html Bugtraq: 20000721 Roxen security alert: Problems with URLs containing null characters. (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html XForce ISS Database: roxen-null-char-url(4965) https://exchange.xforce.ibmcloud.com/vulnerabilities/4965
Copyright	This script is Copyright (C) 2000 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.