Multiple PHP-Gastebuch Information Disclosure Vulnerabilities
BID:8270
Info
Multiple PHP-Gastebuch Information Disclosure Vulnerabilities
| Bugtraq ID: | 8270 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 24 2003 12:00AM |
| Updated: | Jul 24 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Jim Pangalos <[email protected]>. |
| Vulnerable: |
PHP-Gastebuch PHP-Gastebuch 1.60 Beta |
| Not Vulnerable: | |
Discussion
Multiple PHP-Gastebuch Information Disclosure Vulnerabilities
PHP-Gastebuch has been reported prone to multiple information disclosure vulnerabilities. The issue presents itself because the affected software fails to sufficiently control access to sensitive files contained in the PHP-Gastebuch installation.
It has been reported that an attacker may make a request for several sensitive PHP-Gastebuch files, and in doing so reveal potentially sensitive information including administrative MD5 password hashes.
Information collected in this way may be used to mount further attacks against the affected system.
PHP-Gastebuch has been reported prone to multiple information disclosure vulnerabilities. The issue presents itself because the affected software fails to sufficiently control access to sensitive files contained in the PHP-Gastebuch installation.
It has been reported that an attacker may make a request for several sensitive PHP-Gastebuch files, and in doing so reveal potentially sensitive information including administrative MD5 password hashes.
Information collected in this way may be used to mount further attacks against the affected system.
Exploit / POC
Multiple PHP-Gastebuch Information Disclosure Vulnerabilities
The following proof of concept has been provided:
http://www.example.com/guestbook/guestbookdat
http://www.example.com/guestbook/pwd
The following proof of concept has been provided:
http://www.example.com/guestbook/guestbookdat
http://www.example.com/guestbook/pwd
Solution / Fix
Multiple PHP-Gastebuch Information Disclosure Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Multiple PHP-Gastebuch Information Disclosure Vulnerabilities
References:
References:
- PHP-Gastebuch Homepage (PHP-Gastebuch)
- ZH2003-12SA (security advisory): PHP-Gästebuch Ver. 1.60 Beta (Jim Pangalos