4D WebStar Multiple Remote Information Disclosure Vulnerabilities
BID:10721
Info
4D WebStar Multiple Remote Information Disclosure Vulnerabilities
| Bugtraq ID: | 10721 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 13 2004 12:00AM |
| Updated: | Jul 13 2004 12:00AM |
| Credit: | Discovery of this issue is credited to @stake Inc. |
| Vulnerable: |
4D WebSTAR 5.3.2 4D WebSTAR 5.3.1 4D WebSTAR 5.3 4D WebSTAR 5.2.4 4D WebSTAR 5.2.3 4D WebSTAR 5.2.2 4D WebSTAR 5.2.1 4D WebSTAR 5.2 4D WebSTAR 4.0 |
| Not Vulnerable: |
4D WebSTAR 5.3.3 |
Discussion
4D WebStar Multiple Remote Information Disclosure Vulnerabilities
4D WebStar is reportedly affected by multiple information disclosure vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied requests.
Successful exploitation of the first issue will allow an attacker to list arbitrary directories on the affected computer. This might facilitate further attacks against the affected computer.
Successful exploitation of the second issue will allow an attacker to gain access to the 'php.ini' file on the affected computer. This file contains sensitive PHP configuration details and may be used to carry out further attacks against the affected computer.
4D WebStar is reportedly affected by multiple information disclosure vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied requests.
Successful exploitation of the first issue will allow an attacker to list arbitrary directories on the affected computer. This might facilitate further attacks against the affected computer.
Successful exploitation of the second issue will allow an attacker to gain access to the 'php.ini' file on the affected computer. This file contains sensitive PHP configuration details and may be used to carry out further attacks against the affected computer.
Exploit / POC
4D WebStar Multiple Remote Information Disclosure Vulnerabilities
No exploit is required to leverage either of these issues.
No exploit is required to leverage either of these issues.
Solution / Fix
4D WebStar Multiple Remote Information Disclosure Vulnerabilities
Solution:
The vendor has released an upgrade dealing with this issue.
4D WebSTAR 5.2
4D WebSTAR 5.2.1
4D WebSTAR 5.2.2
4D WebSTAR 5.2.3
4D WebSTAR 5.2.4
4D WebSTAR 5.3
4D WebSTAR 5.3.1
4D WebSTAR 5.3.2
Solution:
The vendor has released an upgrade dealing with this issue.
4D WebSTAR 5.2
4D WebSTAR 5.2.1
4D WebSTAR 5.2.2
4D WebSTAR 5.2.3
4D WebSTAR 5.2.4
4D WebSTAR 5.3
4D WebSTAR 5.3.1
4D WebSTAR 5.3.2
References
4D WebStar Multiple Remote Information Disclosure Vulnerabilities
References:
References:
- 4D Inc. Homepage (4D Inc.)
- 4D WebSTAR Product Page (4D Inc.)
- @stake advisory: WebSTAR (5.3.2 and below) Multiple Vulnerabilities (@stake)