PT-2007-1213 · Unknown · Easy Chat Server

Publicado 2007-01-16 · Atualizado 2017-07-29 · CVE-2006-6933

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Easy Chat Server version 2.1

Description: The issue allows remote attackers to download certain files due to insufficient access control. Sensitive information is stored under the web root, making it accessible via direct requests to files such as ServerKey.pem and AcceptIP.txt.

Recommendations: For Easy Chat Server version 2.1, restrict access to sensitive files such as ServerKey.pem and AcceptIP.txt to prevent unauthorized downloads. Consider relocating these files outside the web root or implementing proper access controls to mitigate the risk.

Exploit

Correção

Identificadores relacionados

CVE-2006-6933

Produtos afetados

Easy Chat Server

Referências · 3

• 🔥 http://secunia.com/advisories/22739 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30075 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6933 · Nota de Segurança