CGIScript.net CSFAQ Script Path Disclosure Vulnerability

Bugtraq ID:	10618
Class:	Input Validation Error
CVE:	CVE-2004-0665
Remote:	Yes
Local:	No
Published:	Jun 28 2004 12:00AM
Updated:	Jul 12 2009 05:16AM
Credit:	Discovery is credited to DarkBicho <[email protected]>.
Vulnerable:	CGISCRIPT.NET csFAQ 1.0 CGISCRIPT.NET csFAQ
Not Vulnerable:

CGIScript.net CSFAQ Script Path Disclosure Vulnerability

A vulnerability has been identified in the application that may allow an attacker to disclose the installation path.

Successful exploitation of this vulnerability may allow an attacker to gain sensitive information about the file system that may aid in launching more direct attacks against the system.

All current versions of csFAQ are considered vulnerable to this issue.

CGIScript.net CSFAQ Script Path Disclosure Vulnerability

No exploit is required.

The following proof of concept is available:
http://www.example.com/cgi-script/csFAQ/csFAQ.cgi?command=viewFAQ&database=/.darkbicho

CGIScript.net CSFAQ Script Path Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

CGIScript.net CSFAQ Script Path Disclosure Vulnerability

References:

• CGISCRIPT.NET Homepage (CGISCRIPT.NET)
  
• Full path disclosure csFAQ ("DarkBicho" )