Secunia

e.wiZz! has discovered two vulnerabilities in NaviCOPA, which can be exploited by malicious people to disclose potentially sensitive information, cause a DoS (Denial of Service), or potentially compromise a vulnerable system.

1) A boundary error in the processing of HTTP requests can be exploited to cause a heap-based buffer overflow via an overly long HTTP GET request.

Successful exploitation may allow execution of arbitrary code.

2) An error when processing HTTP requests can be exploited to retrieve the source code of e.g. PHP scripts via specially crafted requests containing e.g. dot characters or by appending "::$DATA" to the filename.

The vulnerabilities are confirmed in version 3.01. Other versions may also be affected.

Solution
Restrict access to trusted users only.

Provided and/or discovered by
e.wiZz!

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/7966
http://milw0rm.com/exploits/9694

Deep Links
Links available in Customer Area