|
|
Info |
Last Modified |
| 10 months ago |
|
|
|
|
Description |
Sun Answerbook2 contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered via unauthenticated requests to @AdminViewError, which will disclose log file contents, resulting in a loss of confidentiality.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Available
OSVDB:
Web Related
|
|
Solution |
Upgrade to version 1.4.2 patched or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): disable the AnswerBook2 Documentation Server, the following commands can be run as the root user:
# /usr/lib/ab2/bin/ab2admin -o stop
# /usr/lib/ab2/bin/ab2admin -o autostart_no
|
|
Products |
|
AnswerBook2
 |
1.3 |
1.4 |
1.4.1 |
1.4.2 |
1.4.2 patched |
|
|
|
|
Tools & Filters |
|
Nikto
|
1233
|
|
|
|
Credit |
- Lluis Mora - llmora
 s21sec.com - S21SEC
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
