PT-2006-4010 · Chipmailer · Chipmailer

Tamriel · Published 2006-06-21 · Updated 2017-07-20 · CVE-2006-3112

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chipmailer version 1.09

Description The issue allows remote attackers to obtain sensitive information via a direct request to "php.php", which displays the output of the phpinfo function.

Recommendations For Chipmailer version 1.09, consider restricting access to the "php.php" file to prevent unauthorized disclosure of sensitive information. As a temporary workaround, remove or rename the "php.php" file until a patch is available.

Fix

Related Identifiers

CVE-2006-3112

Affected Products

Chipmailer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-3112 · Security Note
• http://marc.info/?l=bugtraq&m=115024576618386&w=2 · Note
• http://securitytracker.com/id?1016315 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27159 · Note