This script is Copyright (C) 2000-2011 Tenable Network Security, Inc.
The remote web server is affected by an information disclosure
Requesting a URL with '/%00/' appended to it makes some Roxen servers
dump the listing of the page directory, thus showing potentially
An attacker may also use this flaw to view the source code of RXML
files, Pike scripts or CGIs.
Under some circumstances, information protected by .htaccess files might
Upgrade to the latest version of Roxen.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.2