PT-2006-4010 · Chipmailer · Chipmailer

Tamriel · Publicado 2006-06-21 · Atualizado 2017-07-20 · CVE-2006-3112

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chipmailer version 1.09

Description The issue allows remote attackers to obtain sensitive information via a direct request to "php.php", which displays the output of the phpinfo function.

Recommendations For Chipmailer version 1.09, consider restricting access to the "php.php" file to prevent unauthorized disclosure of sensitive information. As a temporary workaround, remove or rename the "php.php" file until a patch is available.

Correção

Identificadores relacionados

CVE-2006-3112

Produtos afetados

Chipmailer

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-3112 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=115024576618386&w=2 · Nota
• http://securitytracker.com/id?1016315 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27159 · Nota