PT-2004-3467 · Phpgroupware · Phpgroupware

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2576

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpGroupWare version 0.9.16.000

Description The issue concerns the failure to create .htaccess files for authorization checks on users' home-directory files. This allows remote attackers to access sensitive information from these files.

Recommendations For phpGroupWare version 0.9.16.000, consider manually creating .htaccess files to enable authorization checks for access to users' home-directory files as a temporary workaround. Restrict access to sensitive files in the home directory to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-2576

Produtos afetados

Phpgroupware

Referências · 4

• 🔥 https://savannah.gnu.org/bugs/?func=detailitem&item_id=8359 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19195 · Nota
• http://osvdb.org/7617 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2576 · Nota de Segurança