Cobalt RaQ 2.0/3.0 Apache .htaccess Disclosure Vulnerability

ID SSV:73739
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


The default configuration of Cobalt Raq2 and Raq3 servers allows remote access to .htaccess files. This could lead to unauthorized retrieval of username and password information for restricted portions of a website hosted on the server. 

Make a regular GET request, specifying an .htaccess file ie:
http ://target/path/.htaccess