DirectAdmin 'mysql_backup' Folder Permissions Information Disclosure Vulnerability

Bugtraq ID:	47693
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	May 03 2011 12:00AM
Updated:	May 03 2011 12:00AM
Credit:	Pouya Daneshmand
Vulnerable:	JBMC Software DirectAdmin 1.33.6 JBMC Software DirectAdmin 1.33.4 JBMC Software DirectAdmin 1.33.3 JBMC Software DirectAdmin 1.30.2 JBMC Software DirectAdmin 1.30.1 JBMC Software DirectAdmin 1.38 JBMC Software DirectAdmin 1.351 JBMC Software DirectAdmin 1.292
Not Vulnerable:	JBMC Software DirectAdmin 1.381

DirectAdmin 'mysql_backup' Folder Permissions Information Disclosure Vulnerability

DirectAdmin is prone to a local information-disclosure vulnerability.

A local attacker may exploit this issue to gain access to the MySQL database backup content and potentially obtain sensitive information. This may aid in further attacks.

Versions prior to DirectAdmin 1.381 are vulnerable.

DirectAdmin 'mysql_backup' Folder Permissions Information Disclosure Vulnerability

An attacker uses standard commands to exploit this issue.

DirectAdmin 'mysql_backup' Folder Permissions Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.

DirectAdmin 'mysql_backup' Folder Permissions Information Disclosure Vulnerability

References:

• Custombuild MySQL backups directory to be chmod 700 (DirectAdmin)
  
• DirectAdmin Homepage (DirectAdmin)