CGIScript.net csPassword.CGI HTPasswd File Disclosure Vulnerability
BID:4885
Info
CGIScript.net csPassword.CGI HTPasswd File Disclosure Vulnerability
| Bugtraq ID: | 4885 |
| Class: | Access Validation Error |
| CVE: |
CVE-2002-0917 |
| Remote: | Yes |
| Local: | No |
| Published: | May 30 2002 12:00AM |
| Updated: | Jul 11 2009 01:56PM |
| Credit: | Credited to Steve Gustin <[email protected]>. |
| Vulnerable: |
CGISCRIPT.NET csPassword 1.0 |
| Not Vulnerable: | |
Discussion
CGIScript.net csPassword.CGI HTPasswd File Disclosure Vulnerability
CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick.
A vulnerability has been reported in the csPassword.cgi script developed by CGIScript.net. It is possible for a user to obtain access to the .htpasswd file generated by the script.
CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick.
A vulnerability has been reported in the csPassword.cgi script developed by CGIScript.net. It is possible for a user to obtain access to the .htpasswd file generated by the script.
References
CGIScript.net csPassword.CGI HTPasswd File Disclosure Vulnerability
References:
References:
- CGISCRIPT.NET Homepage (CGISCRIPT.NET)