Big Sam Web Root Disclosure Vulnerability
BID:4312
Info
Big Sam Web Root Disclosure Vulnerability
| Bugtraq ID: | 4312 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 18 2002 12:00AM |
| Updated: | Mar 18 2002 12:00AM |
| Credit: | Discovered by Ahmet Sabri ALPER <[email protected]>. |
| Vulnerable: |
Big Sam Big Sam 1.1 .08 |
| Not Vulnerable: |
Big Sam Big Sam 1.1 .09 |
Discussion
Big Sam Web Root Disclosure Vulnerability
Big Sam is a stand along guestbook application written in PHP. It was originally developed for Linux, but may operate under a wide range of Unix and Windows platforms.
A vulnerability has been reported in some versions of Big Sam. If an extremely large parameter is passed to the script, execution may result in excessive resource consumption or in an error message. The error message will contain the full path to the web root. The outcome of exploitation has been reported to depend on the server configuration.
Big Sam is a stand along guestbook application written in PHP. It was originally developed for Linux, but may operate under a wide range of Unix and Windows platforms.
A vulnerability has been reported in some versions of Big Sam. If an extremely large parameter is passed to the script, execution may result in excessive resource consumption or in an error message. The error message will contain the full path to the web root. The outcome of exploitation has been reported to depend on the server configuration.