CVE-2004-2576

CVE-2004-2576 affects phpGroupWare 0.9.16.000; the component class.vfs_dav.inc.php fails to create .htaccess files to enable authorization checks for access to users’ home-directory files. This leads to potential disclosure of sensitive information by remote attackers. The NVD entry lists CVSS v2...

CVE-2004-2576

class.vfsdav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files...