infiniteReality mxCamArchive 'archive/config.ini' Information Disclosure Vulnerability

Bugtraq ID:	32324
Class:	Input Validation Error
CVE:	CVE-2008-6955
Remote:	Yes
Local:	No
Published:	Nov 17 2008 12:00AM
Updated:	Apr 16 2015 05:51PM
Credit:	ahmadbady
Vulnerable:	infiniteReality mxCamArchive 2.2
Not Vulnerable:

infiniteReality mxCamArchive 'archive/config.ini' Information Disclosure Vulnerability

infiniteReality mxCamArchive is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to obtain the administrator password for the vulnerable application. Information obtained may lead to further attacks.

mxCamArchive 2.2 is vulnerable; other versions may also be affected.

infiniteReality mxCamArchive 'archive/config.ini' Information Disclosure Vulnerability

Attackers can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/archive/config.ini

infiniteReality mxCamArchive 'archive/config.ini' Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

infiniteReality mxCamArchive 'archive/config.ini' Information Disclosure Vulnerability

References:

• mxCamArchive Homepage (infiniteReality)