EUVD-2004-0915

Malware in sbrugna...

CVE-2004-0917

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag...

CVE-2004-0917

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag...

CVE-2004-0917

CVE-2004-0917 affects Vignette Application Portal. The default installation exposes an unauthenticated diagnostic utility accessible at /portal/diag (and related paths), enabling remote attackers to disclose sensitive information about the server, OS version, database parameters, and Vignette con...

[VulnWatch] Vignette Application Portal Unauthenticate Diagnostics

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Vignette Application Portal Unauthenticated Diagnostics Release Date: 09-28-2004 Application: Vignette Application Portal Platform: Multiple Severity: Unauthenticated diagnostic functionali...

Vignette Application Portal Diagnostic Utility Information Disclosure

The remote host is running Vignette Application Portal, a commercially available portal suite. There is an information disclosure vulnerability in the remote version of this software. An attacker can request the diagnostic utility which will disclose information about the remote site by requestin...