httpdx 1.4.5 - dot Character Remote File Disclosure

Author: Dr_IDE
type: remote
platform: windows
port: 
date_added: 2009-10-09 
date_updated: 2014-10-02 
verified: 1 
codes: CVE-2009-4531;OSVDB-58857 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/44141/info

The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view the source code of files in the context of the server process. This may aid in further attacks.

Versions prior to httpdx 1.4.6b are vulnerable.

The following example URI are available:

http://www.example.com/index.html.
http://www.example.com/test.py.
http://www.example.com/test.php.