LocalWEB2000 Information Disclosure Weakness

Bugtraq ID:	7947
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 12 2003 12:00AM
Updated:	Apr 12 2003 12:00AM
Credit:	Discovery of this issue is credited to <[email protected]>.
Vulnerable:	LocalWEB2000 LocalWEB2000 2.1 .0 Standard Version - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0
Not Vulnerable:

LocalWEB2000 Information Disclosure Weakness

LocalWEB2000 may disclose sensitive information such as the computer name when handling invalid directory requests. This information could be useful in further attacks against the system.

LocalWEB2000 Information Disclosure Weakness

This issue may be exploited with a web browser.

LocalWEB2000 Information Disclosure Weakness

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.