OSVDB ID: 6932 Title: 602Pro LAN SUITE Web Mail Arbitrary Directory Listing |
Info |
|
|
Dates |
||||
|
|
Description |
602Pro LAN SUITE Web Mail contains a flaw related to the ability to view files in a directory. The issue is triggered when a remote attacker sends an HTTP request to 'cgi-bin/', 'index.html', or 'users/'. This may allow an attacker to obtain a directory listing. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Change Default Setting Exploit: Exploit Public Disclosure: Vendor Disputed, Uncoordinated Disclosure OSVDB: Web Related |
Solution |
Ensure that "Directory browsing" is turned off. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |