Remote file access : 3com RAS 1500 configuration disclosure

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.11480

Category: Remote file access

Title: 3com RAS 1500 configuration disclosure

Summary: NOSUMMARY

Description: Description:

The remote 3com SuperStack II Remote Access System 1500 discloses
its user configuration (user_settings.cfg) when the file is
requested through the web interface.

This file contains the password (in clear text) of this device
as well as other sensitive information.

An attacker may use this flaw to gain the control of this host

Solution : filter incoming traffic to this host
Risk factor : High

Cross-Ref: BugTraq ID: 7176

Copyright This script is Copyright (C) 2003 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.11480
Category:	Remote file access
Title:	3com RAS 1500 configuration disclosure
Summary:	NOSUMMARY
Description:	Description: The remote 3com SuperStack II Remote Access System 1500 discloses its user configuration (user_settings.cfg) when the file is requested through the web interface. This file contains the password (in clear text) of this device as well as other sensitive information. An attacker may use this flaw to gain the control of this host Solution : filter incoming traffic to this host Risk factor : High
Cross-Ref:	BugTraq ID: 7176
Copyright	This script is Copyright (C) 2003 Renaud Deraison