Cobalt RaQ 2.0/3.0 Apache .htaccess Disclosure Vulnerability

2000-03-31T00:00:00
ID EDB-ID:19828
Type exploitdb
Reporter Paul Schreiber
Modified 2000-03-31T00:00:00

Description

Cobalt RaQ 2.0/3.0 Apache .htaccess Disclosure Vulnerability. CVE-2000-0234. Remote exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/1083/info

The default configuration of Cobalt Raq2 and Raq3 servers allows remote access to .htaccess files. This could lead to unauthorized retrieval of username and password information for restricted portions of a website hosted on the server. 

Make a regular GET request, specifying an .htaccess file ie:
http ://target/path/.htaccess