BID:9542

BugPort Unauthorized Configuration File Viewing Vulnerability

Info

BugPort Unauthorized Configuration File Viewing Vulnerability

Bugtraq ID:	9542
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 31 2004 12:00AM
Updated:	Jan 31 2004 12:00AM
Credit:	This issue was reported by the vendor.
Vulnerable:	INCOGEN BugPort 1.098 INCOGEN BugPort 1.097 INCOGEN BugPort 1.096 INCOGEN BugPort 1.095 INCOGEN BugPort 1.094 INCOGEN BugPort 1.093 INCOGEN BugPort 1.092 INCOGEN BugPort 1.091 INCOGEN BugPort 1.090

Not Vulnerable:	INCOGEN BugPort 1.099

Discussion

BugPort Unauthorized Configuration File Viewing Vulnerability

A vulnerability has been reported in BugPort that has the potential to disclose sensitive information to remote attackers. The contents of the BugReport configuration file will be served to remote users who request the file.

This could disclose sensitive configuration information that may be useful when mounting further attacks.

Exploit / POC

BugPort Unauthorized Configuration File Viewing Vulnerability

There is no exploit required.

Solution / Fix

BugPort Unauthorized Configuration File Viewing Vulnerability

Solution:
This issue has been addressed as of BugPort version 1.099.

INCOGEN BugPort 1.092