phpGroupWare Mail Failure Path Disclosure

2002-11-10T21:29:03
ID OSVDB:7666
Type osvdb
Reporter Rick Bartels(rick@bartelshome.net)
Modified 2002-11-10T21:29:03

Description

Vulnerability Description

phpGroupWare contains a flaw that may lead to an unauthorized information disclosure.  The issue is triggered when connecting to external POP3 servers, which will reveal the installation path resulting in a loss of confidentiality. No further details have been provided.

Solution Description

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Short Description

phpGroupWare contains a flaw that may lead to an unauthorized information disclosure.  The issue is triggered when connecting to external POP3 servers, which will reveal the installation path resulting in a loss of confidentiality. No further details have been provided.

References:

Vendor URL: http://www.phpgroupware.org/ Vendor Specific Advisory URL