Hosting Controller Unspecified Information Disclosure Vulnerability

Bugtraq ID:	14840
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 15 2005 12:00AM
Updated:	Sep 15 2005 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	Hosting Controller Hosting Controller 6.1 Hotfix 2.3
Not Vulnerable:	Hosting Controller Hosting Controller 6.1 Hotfix 2.4

Hosting Controller Unspecified Information Disclosure Vulnerability

Hosting Controller is prone to an unspecified information disclosure vulnerability.

This vulnerability could permit a remote attacker to view directory listings and download arbitrary files.

This issue was reported in Hosting Controller 6.1 Hotfix 2.3 and fixed in Hotfix 2.4. Earlier versions could also be affected.

Hosting Controller Unspecified Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hosting Controller Unspecified Information Disclosure Vulnerability

Solution:
This issue has been addressed in Hosting Controller 6.1 Hotfix 2.4.


Hosting Controller Hosting Controller 6.1 Hotfix 2.3

• Hosting Controller HotFixV61_2_4.exe
  http://hostingcontroller.com/english/downloads/HotFixV61_2_4.exe

Hosting Controller Unspecified Information Disclosure Vulnerability

References:

• Hosting Controller Homepage (Hosting Controller)
  
• Hotfix 2.4 Release Notes (Hosting Controller)