BNCweb BNCquery.pl File Disclosure Vulnerability
BID:9181
Info
BNCweb BNCquery.pl File Disclosure Vulnerability
| Bugtraq ID: | 9181 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 09 2003 12:00AM |
| Updated: | Dec 09 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to Matthias Bethke <[email protected]>. |
| Vulnerable: |
BNCWeb BNCWeb |
| Not Vulnerable: | |
Discussion
BNCweb BNCquery.pl File Disclosure Vulnerability
It has been reported that BNCweb may be prone to a file disclosure vulnerability that allow remote attackers to gain unauthorized access to sensitive files hosted on the system running the software. The problem exists in the BNCquery.pl script.
It has been reported that BNCweb may be prone to a file disclosure vulnerability that allow remote attackers to gain unauthorized access to sensitive files hosted on the system running the software. The problem exists in the BNCquery.pl script.
Exploit / POC
BNCweb BNCquery.pl File Disclosure Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
BNCweb BNCquery.pl File Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
BNCweb BNCquery.pl File Disclosure Vulnerability
References:
References:
- BNCWeb Homepage (BNCWeb)
- BNCweb File Disclosure Vulnerability (Matthias Bethke