DS ViewPoint Server Arbitrary File Reading Information Disclosure Vulnerability

Bugtraq ID:	7260
Class:	Configuration Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 02 2003 12:00AM
Updated:	Apr 02 2003 12:00AM
Credit:	Discovery credited to =?iso-8859-1?q?Ben=20Maynard?= <[email protected]>.
Vulnerable:	DS ViewPoint Server
Not Vulnerable:

DS ViewPoint Server Arbitrary File Reading Information Disclosure Vulnerability

It has been reported that DS ViewPoint Server allows a local user to gain access to sensitive files through a problem in the /tmp directory. This could result in information disclosure, and a more organized attack on system resources.

DS ViewPoint Server Arbitrary File Reading Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

DS ViewPoint Server Arbitrary File Reading Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

DS ViewPoint Server Arbitrary File Reading Information Disclosure Vulnerability

References:

• ViewPoint Server (DS)