{"title": "Auto Directory Index Direct GET Request Hidden File Access", "published": "2003-02-12T00:00:00", "references": [], "type": "osvdb", "enchantments": {"score": {"value": -0.1, "vector": "NONE", "modified": "2017-04-28T13:20:02"}, "dependencies": {"references": [], "modified": "2017-04-28T13:20:02"}, "vulnersScore": -0.1}, "cvelist": [], "viewCount": 0, "affectedSoftware": [{"version": "1.0.2", "name": "Auto Directory Index", "operator": "eq"}, {"version": "1.0.0", "name": "Auto Directory Index", "operator": "eq"}, {"version": "1.0.3", "name": "Auto Directory Index", "operator": "eq"}, {"version": "1.0.1", "name": "Auto Directory Index", "operator": "eq"}], "hash": "5fca615ee526c3d207958f91c780b75204ad5c1bb2a2e766ef1f212e053f8e9a", "id": "OSVDB:7120", "modified": "2003-02-12T00:00:00", "history": [], "href": "https://vulners.com/osvdb/OSVDB:7120", "hashmap": [{"hash": "9b2383f24443f86584240f6ed83b1675", "key": "affectedSoftware"}, {"hash": "f9fa10ba956cacf91d7878861139efb9", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "041a638f10fa8b7389b900cc1f09a3b8", "key": "description"}, {"hash": "6db944e3a0f2b5b4193523311634db94", "key": "href"}, {"hash": "b87c78615335e2897982b3ffdd67868c", "key": "modified"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "b87c78615335e2897982b3ffdd67868c", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "955b328dc7cd615c13af5464c9183464", "key": "reporter"}, {"hash": "5dd4b78e6310ca6f1732c84d7c9875db", "key": "title"}, {"hash": "1327ac71f7914948578f08c54f772b10", "key": "type"}], "objectVersion": "1.2", "edition": 1, "description": "## Vulnerability Description\nAuto Directory Index contains a flaw that may lead to an unauthorized information disclosure. \u00a0The issue is triggered when a remote attacker directly requests a file or directory flagged as 'hidden', which will disclose the contents of the file/directory resulting in a loss of confidentiality.\n## Solution Description\nUpgrade to version 1.0.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nAuto Directory Index contains a flaw that may lead to an unauthorized information disclosure. \u00a0The issue is triggered when a remote attacker directly requests a file or directory flagged as 'hidden', which will disclose the contents of the file/directory resulting in a loss of confidentiality.\n## References:\nVendor URL: http://autoindex.sourceforge.net/\n[Vendor Specific Advisory URL](http://autoindex.sourceforge.net/changeLog.html)\n", "bulletinFamily": "software", "reporter": "OSVDB", "cvss": {"vector": "NONE", "score": 0.0}, "lastseen": "2017-04-28T13:20:02"}

{}