CGI abuses : VChat information disclosure

Anfälligkeitssuche		Suche in 324607 CVE Beschreibungen und 145615 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.11471

Kategorie: CGI abuses

Titel: VChat information disclosure

Zusammenfassung: NOSUMMARY

Beschreibung: Description:

It is possible to retrieve the log of all the chat sessions
that have occured on the remote vchat server by requesting
the file vchat/msg.txt

An attacker may use this flaw to read past chat sessions and
possibly harass its participants.

In addition to this, another flaw in the same product may allow an attacker
to consume all the resources of the remote host by sending a long
message to this module.

Solution : None at this time. Add a .htaccess file to prevent an attacker
from obtaining this file

Risk factor : Low

Querverweis: BugTraq ID: 7186
BugTraq ID: 7188

Copyright This script is Copyright (C) 2003 Renaud Deraison

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.11471
Kategorie:	CGI abuses
Titel:	VChat information disclosure
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: It is possible to retrieve the log of all the chat sessions that have occured on the remote vchat server by requesting the file vchat/msg.txt An attacker may use this flaw to read past chat sessions and possibly harass its participants. In addition to this, another flaw in the same product may allow an attacker to consume all the resources of the remote host by sending a long message to this module. Solution : None at this time. Add a .htaccess file to prevent an attacker from obtaining this file Risk factor : Low
Querverweis:	BugTraq ID: 7186 BugTraq ID: 7188
Copyright	This script is Copyright (C) 2003 Renaud Deraison