BlazeBoard Information Disclosure Vulnerability
BID:8188
Info
BlazeBoard Information Disclosure Vulnerability
| Bugtraq ID: | 8188 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 14 2003 12:00AM |
| Updated: | Jul 14 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to JackDaniels of the Databugs Team <[email protected]>. |
| Vulnerable: |
BlazeBoard BlazeBoard 1.0 BETA |
| Not Vulnerable: | |
Discussion
BlazeBoard Information Disclosure Vulnerability
It has been alleged that BlazeBoard fails to adequately protect the contents of a directory in a default install. It is therefore possible for remote users to request files from this directory. This could expose sensitive information stored in these directories to remote attackers.
It has been alleged that BlazeBoard fails to adequately protect the contents of a directory in a default install. It is therefore possible for remote users to request files from this directory. This could expose sensitive information stored in these directories to remote attackers.
Exploit / POC
BlazeBoard Information Disclosure Vulnerability
The following proof of concept has been provided:
http://www.example.com/board/docs/
The following proof of concept has been provided:
http://www.example.com/board/docs/
Solution / Fix
BlazeBoard Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.