Aiglon Web Server 2.0 - Installation Path Information Disclosure

Author: Ziv Kamir
type: remote
platform: multiple
port: 
date_added: 2003-06-10 
date_updated: 2012-11-16 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/7867/info

A weakness has been discovered in Aiglon Web Server, which may provide for the disclosure of sensitive information to remote attackers.

It has been reported that a remote attacker may cause the web server to disclose installation path details by making a malformed HTTP request. The remote attacker may potentially use the disclosed information to aid in further "intelligent" attacks against the host running the affected software.

http://www.example.com/index.html*