https://www.exploit-db.com/exploits/19747
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200002-039

ZeusWeb服务器存在漏洞。远程攻击者借助URL末端的空字符（%00）可以查看CGI程序的源代码。

source: http://www.securityfocus.com/bid/977/info

Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in directories which are designated as executable (eg. cgi-bin) are not vulnerable to this exploit.

http ://target/script.cgi%00

"%00" may be replaced with "%G0", "%W0", "%EW", "%FG", "%UW", or "%VG" in order to achieve the same results.

来源:XF
名称:zeus-server-null-string(3982)
链接:http://xforce.iss.net/xforce/xfdb/3982
来源:BID
名称:977
链接:http://www.securityfocus.com/bid/977
来源:OSVDB
名称:254
链接:http://www.osvdb.org/254
来源:BUGTRAQ
名称:20000208ZeusWebServer:NullTerminatedStrings
链接:http://archives.neohapsis.com/archives/bugtraq/2000-02/0057.html