PT-2005-1734 · Hosting Controller · Hosting Controller

(\\/) Mouse + 1 · Publicado 2005-03-07 · Atualizado 2016-10-18 · CVE-2005-0694

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hosting Controller versions 6.1 Hotfix 1.7 and earlier

Description The issue allows remote attackers to obtain sensitive information via a direct request to "HCDiskQuotaService.csv". This is because log files are stored under the web root.

Recommendations For Hosting Controller versions 6.1 Hotfix 1.7 and earlier, consider restricting access to the log files, specifically "HCDiskQuotaService.csv", to prevent remote attackers from obtaining sensitive information. As a temporary workaround, consider moving log files outside of the web root until a more permanent solution is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-0694

Produtos afetados

Hosting Controller

Referências · 4

• 🔥 http://secunia.com/advisories/14522 · Exploit
• http://marc.info/?l=bugtraq&m=111026083314947&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0694 · Nota de Segurança
• http://isun.shabgard.org/hc2.txt · Aviso do Fabricante