Zeus Web Server 3.x - Null Terminated Strings

Author: Vanja Hrustic
type: remote
platform: cgi
port: 
date_added: 2000-02-08 
date_updated: 2012-07-11 
verified: 1 
codes: CVE-2000-0149;OSVDB-254 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/977/info

Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in directories which are designated as executable (eg. \cgi-bin) are not vulnerable to this exploit.

http ://target/script.cgi%00

"%00" may be replaced with "%G0", "%W0", "%EW", "%FG", "%UW", or "%VG" in order to achieve the same results.