CVE-2003-1379: Exposure of Sensitive Information to an Unauthorized Actor

clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters 1 A, which reveals the date and time, 2 F, 3 M, which reveals 'ifconfig' information, 4 P, which lists the processes, 5 Y, which reveals the snort log files, or 6 b,...

ClarkConnect Linux clarkconnectd Remote Information Disclosure

The 'clarkconnectd' service appears to be listening on this port. This service provides sensitive information to remote, unauthenticated users, such as a list of running processes, the contents of /var/log/messages, the contents of the snort log, and more. A remote attacker could use this...

clarkconnect(d) information disclosure

I. BACKGROUND According to the vendor "ClarkConnect transforms standard PC hardware into a dedicated broadband gateway and easy-to-use server. The award-winning Linux-based server solution includes firewall and security tools, along with file, print, web, e-mail, proxy, and VPN servers."...