Agora.CGI Debug Mode Path Disclosure Vulnerability

Bugtraq ID:	3976
Class:	Input Validation Error
CVE:	CVE-2002-0215
Remote:	Yes
Local:	No
Published:	Jan 28 2002 12:00AM
Updated:	Jul 11 2009 09:56AM
Credit:	This vulnerability was submitted to BugTraq on January 28th, 2002 by <[email protected]>.
Vulnerable:	Agora.cgi Agora.cgi 4.0 e Agora.cgi Agora.cgi 4.0 d Agora.cgi Agora.cgi 4.0 c Agora.cgi Agora.cgi 4.0 b Agora.cgi Agora.cgi 4.0 a Agora.cgi Agora.cgi 4.0 Agora.cgi Agora.cgi 3.3 j Agora.cgi Agora.cgi 3.3 i Agora.cgi Agora.cgi 3.3 f Agora.cgi Agora.cgi 3.3 e Agora.cgi Agora.cgi 3.3 d Agora.cgi Agora.cgi 3.3 c Agora.cgi Agora.cgi 3.3 b Agora.cgi Agora.cgi 3.3 a Agora.cgi Agora.cgi 3.2 r Agora.cgi Agora.cgi 3.2 q Agora.cgi Agora.cgi 3.2 p Agora.cgi Agora.cgi 3.2 n Agora.cgi Agora.cgi 3.2 m Agora.cgi Agora.cgi 3.2 l Agora.cgi Agora.cgi 3.2 k Agora.cgi Agora.cgi 3.2 ja Agora.cgi Agora.cgi 3.2 j Agora.cgi Agora.cgi 3.2 i Agora.cgi Agora.cgi 3.2 h Agora.cgi Agora.cgi 3.2 g Agora.cgi Agora.cgi 3.2 f Agora.cgi Agora.cgi 3.2 e Agora.cgi Agora.cgi 3.2 d Agora.cgi Agora.cgi 3.2 c Agora.cgi Agora.cgi 3.2 b Agora.cgi Agora.cgi 3.2 a Agora.cgi Agora.cgi 3.2
Not Vulnerable:

Agora.CGI Debug Mode Path Disclosure Vulnerability

Agora.cgi is a freely available, open source shopping cart system.

When debug mode is enabled, it is possible for a remote attacker to display the absolute path to the directory that the agora.cgi script is stored in. This is possible by making a web request for a non-existent .html file.

The remote attacker may potentially use the disclosed information to aid in further "intelligent" attacks against the host running the vulnerable software.

Agora.CGI Debug Mode Path Disclosure Vulnerability

The following example is sufficient to reproduce this issue:

http://agoracgistorehost/cgi-bin/store/agora.cgi?page=pretendpage.html

where pretendpage.html is a non-existent .html file.

Agora.CGI Debug Mode Path Disclosure Vulnerability