RealizationEngine Private Folder Enumeration Vulnerability

Bugtraq ID:	5077
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 20 2002 12:00AM
Updated:	Jun 20 2002 12:00AM
Credit:	Published in a RealizationEngine changelog.
Vulnerable:	RealizationEngine RealizationEngine 1.0.4 RealizationEngine RealizationEngine 1.0.3 RealizationEngine RealizationEngine 1.0.2 RealizationEngine RealizationEngine 1.0.1
Not Vulnerable:	RealizationEngine RealizationEngine 1.0.5

RealizationEngine Private Folder Enumeration Vulnerability

RealizationEngine is a web based communication board maintained by Realization Systems.

A vulnerability has been discovered in RealizationEngine which could allow users to enumerate if a private folder exists.

This issue was reported in versions prior to 1.0.5.

RealizationEngine Private Folder Enumeration Vulnerability

No exploit code required.

RealizationEngine Private Folder Enumeration Vulnerability

Solution:
This issue is addressed in 1.0.5:


RealizationEngine RealizationEngine 1.0.1

• RealizationEngine RealizationEngine1.0.5
  http://www.realizationsystems.com/downloads/RealizationEngine1.0.5.tar .gz

RealizationEngine RealizationEngine 1.0.2

• RealizationEngine RealizationEngine1.0.5
  http://www.realizationsystems.com/downloads/RealizationEngine1.0.5.tar .gz

RealizationEngine RealizationEngine 1.0.3

• RealizationEngine RealizationEngine1.0.5
  http://www.realizationsystems.com/downloads/RealizationEngine1.0.5.tar .gz

RealizationEngine RealizationEngine 1.0.4

• RealizationEngine RealizationEngine1.0.5
  http://www.realizationsystems.com/downloads/RealizationEngine1.0.5.tar .gz