Title: Plans Unspecified mySQL Remote Password Disclosure
Info
Disclosure
Apr 30, 2005
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
Plans calendar contain a flaw related to the mySQL database that may allow an attacker to obtain the database password used by the application. No further details have been provided.
Classification
Location:
Remote / Network Access
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Disclosure:
OSVDB Verified
OSVDB:
Web Related
Solution
Upgrade to version 6.7.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.