Software602 602Pro LAN Suite Web Mail Installation Path Disclosure Vulnerability

BID:9781

Info

Software602 602Pro LAN Suite Web Mail Installation Path Disclosure Vulnerability

Bugtraq ID: 9781
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: Mar 01 2004 12:00AM
Updated: Mar 01 2004 12:00AM
Credit: Disclosure of this issue has been credited to Rafel Ivgi, The-Insider <[email protected]>
Vulnerable: Software602 602Pro LAN SUITE 2003
Software602 602Pro LAN SUITE 2002
- Microsoft Windows 2000 Advanced Server SP2
 - Microsoft Windows 2000 Advanced Server SP1
 - Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional SP2
 - Microsoft Windows 2000 Professional SP1
 - Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server SP2
 - Microsoft Windows 2000 Server SP1
 - Microsoft Windows 2000 Server
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT Server 4.0 SP6a
 - Microsoft Windows NT Server 4.0 SP6
 - Microsoft Windows NT Server 4.0 SP5
 - Microsoft Windows NT Server 4.0 SP4
 - Microsoft Windows NT Server 4.0 SP3
 - Microsoft Windows NT Server 4.0 SP2
 - Microsoft Windows NT Server 4.0 SP1
 - Microsoft Windows NT Server 4.0
 - Microsoft Windows NT Workstation 4.0 SP6a
 - Microsoft Windows NT Workstation 4.0 SP6
 - Microsoft Windows NT Workstation 4.0 SP5
 - Microsoft Windows NT Workstation 4.0 SP4
 - Microsoft Windows NT Workstation 4.0 SP3
 - Microsoft Windows NT Workstation 4.0 SP2
 - Microsoft Windows NT Workstation 4.0 SP1
 - Microsoft Windows NT Workstation 4.0
 - Microsoft Windows XP Home
Not Vulnerable: Software602 602 Pro LAN SUITE 2004

Discussion

Software602 602Pro LAN Suite Web Mail Installation Path Disclosure Vulnerability

It has been reported that 602Pro LAN SUITE is prone to a remote installation path disclosure vulnerability. This issue is due to the existence of a hidden parameter embedded within the 'login' form that specifies the installation path.

Successful exploitation of this issue may allow an attacker to gain sensitive information about the file system that may aid in launching more direct attacks against the system.

Exploit / POC

Software602 602Pro LAN Suite Web Mail Installation Path Disclosure Vulnerability

No exploit is required to exploit this issue.

Solution / Fix

Software602 602Pro LAN Suite Web Mail Installation Path Disclosure Vulnerability

Solution:
The vendor has released 602LAN SUITE 2004 to address this issue:


Software602 602Pro LAN SUITE 2002

Software602 602Pro LAN SUITE 2003

References

Software602 602Pro LAN Suite Web Mail Installation Path Disclosure Vulnerability

References:
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report