F-Secure Policy Manager FSMSH.DLL CGI Application Installation Path Disclosure Vulnerability
BID:11869
Info
F-Secure Policy Manager FSMSH.DLL CGI Application Installation Path Disclosure Vulnerability
| Bugtraq ID: | 11869 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 09 2004 12:00AM |
| Updated: | Dec 09 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to <[email protected]>. |
| Vulnerable: |
F-Secure Policy Manager 5.11 |
| Not Vulnerable: | |
Discussion
F-Secure Policy Manager FSMSH.DLL CGI Application Installation Path Disclosure Vulnerability
F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the vulnerable software will return an error message that includes the installation path of the software.
F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the vulnerable software will return an error message that includes the installation path of the software.
Exploit / POC
F-Secure Policy Manager FSMSH.DLL CGI Application Installation Path Disclosure Vulnerability
The following example is available:
/fsms/fsmsh.dll?
The following example is available:
/fsms/fsmsh.dll?
Solution / Fix
F-Secure Policy Manager FSMSH.DLL CGI Application Installation Path Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
F-Secure Policy Manager FSMSH.DLL CGI Application Installation Path Disclosure Vulnerability
References:
References: