The host is running NaviCOPA Web Server and is prone to Source Code Disclosure vulnerability.

Successful exploitation will allow remote attackers to display the source code of arbitrary files (e.g. PHP) instead of an expected HTML response. Impact Level: Application

Upgrade to the NaviCOPA Web Server version 3.0.1.3 or later. For updates refer to http://www.navicopa.com/download.html

This issue is caused by an error when handling requests with the '%20' string appended to the file extension.

NaviCOPA Web Server version 3.0.1.2 and prior on windows.

• http://secunia.com/advisories/37014
• http://www.packetstormsecurity.org/0910-exploits/navicopa-disclose.txt
• http://www.vupen.com/english/advisories/2009/2927
• http://xforce.iss.net/xforce/xfdb/53799

---

Updated on 2015-03-25