A vulnerability has been reported in IDV Directory Viewer, which can be exploited by malicious people to disclose system information.

Input passed to the "dir" parameter in index.php isn't properly sanitised before being used to generate directory listings. This can be exploited to disclose the directory listing of the web server's root directory.

The vulnerability has been reported in versions prior to 2005.1.

Solution
Update to version 2005.1.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=382593&group_id=152499

Deep Links
Links available in Customer Area