TIPS MailPost Remote Debug Mode Information Disclosure Vulnerability

Bugtraq ID:	11595
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 03 2004 12:00AM
Updated:	Nov 03 2004 12:00AM
Credit:	Disclosure of this issue is credited to Gemma Hughes <[email protected]>.
Vulnerable:	TIPS MailPost 5.1.1 sv
Not Vulnerable:

TIPS MailPost Remote Debug Mode Information Disclosure Vulnerability

TIPS MailPost is affected by a remote debug mode information disclosure vulnerability. This issue is due to a design error that allows for the disclosure of sensitive information.

An attacker may leverage this issue to gain knowledge of sensitive information such as the server Web root directory and the Web server versions. Information disclosed in this way may facilitate further attacks.

TIPS MailPost Remote Debug Mode Information Disclosure Vulnerability

No exploit is required to leverage this issue.

TIPS MailPost Remote Debug Mode Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

TIPS MailPost Remote Debug Mode Information Disclosure Vulnerability

References:

• MailPost Home Page (TIPS)
  
• ProCheckUp SecurityBulletin PR04-09 - MailPost Debug Mode Information Disclosure (ProCheckUp)
  
• Vulnerability Note VU#858726 - MailPost discloses sensitive system information (US-CERT)