PT-2006-1890 · Leif M. Wright · Leif M. Wright'S Blog

Aliaksandr Hartsuyeu · Published 2006-02-22 · Updated 2017-07-20 · CVE-2006-0843

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Leif M. Wright's Blog version 3.5

Description The issue allows remote attackers to read the administrator's password due to insufficient access control of the config file and other txt files stored under the web root.

Recommendations For version 3.5, restrict access to the config file and other sensitive txt files to prevent remote reading of the administrator's password. Consider moving these files outside of the web root or implementing proper access controls to mitigate the risk.

Fix

Related Identifiers

CVE-2006-0843

Affected Products

Leif M. Wright'S Blog

References · 6

• http://secunia.com/advisories/18923 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0843 · Security Note
• http://evuln.com/vulns/82/summary.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24752 · Note
• http://securityfocus.com/bid/16712 · Note
• http://securityreason.com/securityalert/522 · Note