DotBr Config.Inc Information Disclosure Vulnerability
BID:6865
Info
DotBr Config.Inc Information Disclosure Vulnerability
| Bugtraq ID: | 6865 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2003 12:00AM |
| Updated: | Feb 15 2003 12:00AM |
| Credit: | Discovery of this issue is credited to Frog Man <[email protected]>. |
| Vulnerable: |
DotBr BotBr 0.1 |
| Not Vulnerable: | |
Discussion
DotBr Config.Inc Information Disclosure Vulnerability
The DotBr configuration file may potentially disclose sensitive information to remote attackers. This issue occurs because the configuration file does not have the proper PHP file extension, and may be displayed by the webserver instead of handled by the PHP interpreter. Database authentication credentials and other information may be disclosed as a result.
The DotBr configuration file may potentially disclose sensitive information to remote attackers. This issue occurs because the configuration file does not have the proper PHP file extension, and may be displayed by the webserver instead of handled by the PHP interpreter. Database authentication credentials and other information may be disclosed as a result.
Exploit / POC
DotBr Config.Inc Information Disclosure Vulnerability
This issue may be exploited with a web browser.
This issue may be exploited with a web browser.
Solution / Fix
DotBr Config.Inc Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.