DAViCal Really Simple CalDAV Store Unspecified Information Disclosure Vulnerability

Bugtraq ID:	26352
Class:	Unknown
CVE:	CVE-2007-5953
Remote:	Yes
Local:	No
Published:	Oct 25 2007 12:00AM
Updated:	Nov 20 2007 11:34PM
Credit:	The vendor disclosed this issue.
Vulnerable:	DAViCal Really Simple CalDAV Store 0.8
Not Vulnerable:	DAViCal Really Simple CalDAV Store 0.9.2 DAViCal Really Simple CalDAV Store 0.9.1

DAViCal Really Simple CalDAV Store Unspecified Information Disclosure Vulnerability

Really Simple CalDAV Store (RSCDS) is prone to an unspecified information-disclosure vulnerability.

An attacker can exploit this issue to access sensitive information that may help in further attacks.

This issue affects versions prior to RSCDS 0.9.1.

DAViCal Really Simple CalDAV Store Unspecified Information Disclosure Vulnerability

An attacker uses standard tools to exploit this issue.

DAViCal Really Simple CalDAV Store Unspecified Information Disclosure Vulnerability

Solution:
The vendor has released updates to address this issue. Please see the references for more information.


DAViCal Really Simple CalDAV Store 0.8

• DAViCal rscds-0.9.2.tar.gz
  http://downloads.sourceforge.net/rscds/rscds-0.9.2.tar.gz?modtime=1194 220880&big_mirror=0

DAViCal Really Simple CalDAV Store Unspecified Information Disclosure Vulnerability

References:

• Really Simple CalDAV Store 0.9.1 Release Notes (DAViCal)
  
• Really Simple CalDAV Store 0.9.2 Release Notes (DAViCal)
  
• RSCDS Home DAViCal CalDAV Server (DAViCal)