Hyper Estraier Remote Information Disclosure Vulnerability

Bugtraq ID:	15236
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 28 2005 12:00AM
Updated:	Oct 28 2005 12:00AM
Credit:	The researcher responsible for discovering this issue is not known.
Vulnerable:	Hyper Estraier Hyper Estraier 1.0.1 Hyper Estraier Hyper Estraier 1.0
Not Vulnerable:	Hyper Estraier Hyper Estraier 1.0.2

Hyper Estraier Remote Information Disclosure Vulnerability

Hyper Estraier can allow remote attackers to disclose restricted files.

Information gathered through the exploitation of this vulnerability may aid in other attacks.

Hyper Estraier 1.0.1 and prior versions running in Windows platforms are vulnerable to this issue.

Hyper Estraier Remote Information Disclosure Vulnerability

An exploit is not required.

Hyper Estraier Remote Information Disclosure Vulnerability

Solution:
The vendor has released Hyper Estraier 1.0.2 to address this issue.


Hyper Estraier Hyper Estraier 1.0

• Hyper Estraier hyperestraier-1.0.2.tar.gz
  http://hyperestraier.sourceforge.net/hyperestraier-1.0.2.tar.gz

Hyper Estraier Hyper Estraier 1.0.1

• Hyper Estraier hyperestraier-1.0.2.tar.gz
  http://hyperestraier.sourceforge.net/hyperestraier-1.0.2.tar.gz

Hyper Estraier Remote Information Disclosure Vulnerability

References:

• Home Page (Hyper Estraier)
  
• Hyper Estraier Lets Remote Users View File Contents (Security Tracker)