.netCART Settings.XML Information Disclosure Vulnerability
BID:8210
Info
.netCART Settings.XML Information Disclosure Vulnerability
| Bugtraq ID: | 8210 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 16 2003 12:00AM |
| Updated: | Jul 16 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to G00db0y <[email protected]>. |
| Vulnerable: |
.netCART .netCART |
| Not Vulnerable: | |
Discussion
.netCART Settings.XML Information Disclosure Vulnerability
.netCART is a web based e-commerce and shopping cart site designed for ASP.NET.
It has been alleged that .netCART fails to adequately protect the contents of a directory in a default install. It is therefore reportedly possible for remote users to request the an XML file from this directory. This could expose sensitive information stored in this file, including authentication credentials to remote attackers.
Information collected in this manner may be used to aid in further attacks launched against the vulnerable system.
.netCART is a web based e-commerce and shopping cart site designed for ASP.NET.
It has been alleged that .netCART fails to adequately protect the contents of a directory in a default install. It is therefore reportedly possible for remote users to request the an XML file from this directory. This could expose sensitive information stored in this file, including authentication credentials to remote attackers.
Information collected in this manner may be used to aid in further attacks launched against the vulnerable system.
Exploit / POC
.netCART Settings.XML Information Disclosure Vulnerability
The following proof of concept has been supplied:
http://www.example.com/Data/settings.xml
The following proof of concept has been supplied:
http://www.example.com/Data/settings.xml
Solution / Fix
.netCART Settings.XML Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.