EUVD-2008-1752

Malware in sbrugna...

Improper access control

ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for 1 config.ini or 2 database.ini. NOTE: some of these details are obtained from third party information...

CVE-2008-1752

ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for 1 config.ini or 2 database.ini. NOTE: some of these details are obtained from third party information...

CVE-2008-1752

ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for 1 config.ini or 2 database.ini. NOTE: some of these details are obtained from third party information...

CVE-2008-1752

CVE-2008-1752 affects ezRADIUS 0.1. The vulnerability is due to insufficient access control exposing sensitive files under the web root, allowing remote attackers to directly fetch config.ini or database.ini and obtain credentials. This is documented across multiple sources in the connected set. ...

CVE-2008-1752: Exposure of Sensitive Information to an Unauthorized Actor

ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for 1 config.ini or 2 database.ini. NOTE: some of these details are obtained from third party information...