PT-2005-1734 · Hosting Controller · Hosting Controller

(\\/) Mouse + 1 · Published 2005-03-07 · Updated 2016-10-18 · CVE-2005-0694

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hosting Controller versions 6.1 Hotfix 1.7 and earlier

Description The issue allows remote attackers to obtain sensitive information via a direct request to "HCDiskQuotaService.csv". This is because log files are stored under the web root.

Recommendations For Hosting Controller versions 6.1 Hotfix 1.7 and earlier, consider restricting access to the log files, specifically "HCDiskQuotaService.csv", to prevent remote attackers from obtaining sensitive information. As a temporary workaround, consider moving log files outside of the web root until a more permanent solution is available.

Exploit

Fix

Related Identifiers

CVE-2005-0694

Affected Products

Hosting Controller

References · 4

• 🔥 http://secunia.com/advisories/14522 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0694 · Security Note
• http://isun.shabgard.org/hc2.txt · Vendor Advisory
• http://marc.info/?l=bugtraq&m=111026083314947&w=2 · Note