Easy File Sharing (EFS) Web Server 1.2 stores the (1) option.ini (aka options.ini) file and (2) log directory under the web root with insufficient access control, which allows remote attackers to obtain sensitive information including an SMTP account username and password hash, the server configuration, and server log files.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2003-10/0083.html | Exploit |
| http://www.osvdb.org/23794 | Exploit Patch |
| http://www.osvdb.org/23795 | Exploit Patch |
| http://archives.neohapsis.com/archives/bugtraq/2003-10/0083.html | Exploit |
| http://www.osvdb.org/23794 | Exploit Patch |
| http://www.osvdb.org/23795 | Exploit Patch |
Configurations
History
20 Nov 2024, 23:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/bugtraq/2003-10/0083.html - Exploit | |
| References | () http://www.osvdb.org/23794 - Exploit, Patch | |
| References | () http://www.osvdb.org/23795 - Exploit, Patch |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:46
NVD link : CVE-2003-1297
Mitre link : CVE-2003-1297
CVE.ORG link : CVE-2003-1297
JSON object : View
Products Affected
efs_software
- efs_web_server
CWE