CVE-2009-4529

Published: Dec 31, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs.

Affected (3)

Products: Intervations: Navicopa Web Server

Intervations

1 product

Navicopa Web Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Intervations Navicopa Web Server	Up to 3.0.1.2
Intervations Navicopa Web Server	Version 2.01
Intervations Navicopa Web Server	Version 3.01

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (16)

http://freetexthost.com/n5l0h34pxc

Source: cve@mitre.org

URL Repurposed

http://osvdb.org/58949

Source: cve@mitre.org

http://pocoftheday.blogspot.com/2009/10/navicopa-web-server-3012-remote-source.html

Source: cve@mitre.org

http://secunia.com/advisories/37014

Source: cve@mitre.org

Vendor Advisory

http://www.packetstormsecurity.org/0910-exploits/navicopa-disclose.txt

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/36705

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2009/2927

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/53799

Source: cve@mitre.org

http://freetexthost.com/n5l0h34pxc