Epona IP Address Information Disclosure Vulnerability
BID:34651
Info
Epona IP Address Information Disclosure Vulnerability
| Bugtraq ID: | 34651 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-6601 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 18 2008 12:00AM |
| Updated: | Apr 23 2009 06:26PM |
| Credit: | The vendor |
| Vulnerable: |
Epona Epona 1.4.10 Epona Epona 1.4.9 Epona Epona 1.4.8 Epona Epona 1.4.7 Epona Epona 1.4.6 Epona Epona 1.4.5 Epona Epona 1.4.4 Epona Epona 1.4.3 Epona Epona 1.4.2 Epona Epona 1.4.1 Epona Epona 1.5rc1 |
| Not Vulnerable: |
Epona Epona 1.5rc3 |
Discussion
Epona IP Address Information Disclosure Vulnerability
Epona is prone to an information disclosure vulnerability.
An attacker can exploit this vulnerability to retrieve the IP address of other users. Information obtained may aid in further attacks.
Versions prior to Epona 1.5rc3 are vulnerable.
Epona is prone to an information disclosure vulnerability.
An attacker can exploit this vulnerability to retrieve the IP address of other users. Information obtained may aid in further attacks.
Versions prior to Epona 1.5rc3 are vulnerable.
Exploit / POC
Epona IP Address Information Disclosure Vulnerability
Attackers can exploit this vulnerability via a browser.
Attackers can exploit this vulnerability via a browser.
Solution / Fix
Epona IP Address Information Disclosure Vulnerability
Solution:
Vendor updates are available. Contact the vendor for more information.
Solution:
Vendor updates are available. Contact the vendor for more information.
References
Epona IP Address Information Disclosure Vulnerability
References:
References:
- Epona Homepage (Epona)
- Version 1.5rc3 of Epona (Epona)