Pimentech PimenGest2 RowLatex.inc.PHP Information Disclosure Vulnerability

Bugtraq ID:	10408
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 24 2004 12:00AM
Updated:	May 24 2004 12:00AM
Credit:	This vulnerability was announced in a vendor changelog.
Vulnerable:	Pimentech PimenGest2 1.10 -1
Not Vulnerable:	Pimentech PimenGest2 1.1.1 -1

Pimentech PimenGest2 RowLatex.inc.PHP Information Disclosure Vulnerability

A vulnerability has been reported in Pimentech PimenGest2 that may allow a remote attacker to disclose sensitive information. This issue is reported to allow an attacker to view debug information that contains a database password.

Pimentech PimenGest2 RowLatex.inc.PHP Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Pimentech PimenGest2 RowLatex.inc.PHP Information Disclosure Vulnerability

Solution:
The vendor has released an upgrade to address this issue:


Pimentech PimenGest2 1.10 -1

• Pimentech pimengest2.tgz
  ftp://ftp.pimentech.net/src/pimengest2.tgz

Pimentech PimenGest2 RowLatex.inc.PHP Information Disclosure Vulnerability

References:

• PimenGest2 Homepage (Pimentech)