WFChat 1.0 – Information Disclosure

漏洞ID	1107250	漏洞类型
发布时间	2003-03-19	更新时间	2003-03-19
CVE编号	CVE-2003-1540	CNNVD-ID	N/A
漏洞平台	Multiple	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/22388
https://cxsecurity.com/issue/WLB-2008020047

|漏洞详情

This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.

|漏洞EXP

source: http://www.securityfocus.com/bid/7147/info

An information disclosure vulnerability has been reported for WFChat. The vulnerability will result in the disclosure of authentication information to a remote attacker.

Information obtained in this manner may allow the attacker to launch further attacks against a vulnerable system.

http://[somehost]/chat/!nicks.txt
http://[somehost]/chat/!pwds.txt

|参考资料

resource:
hyperlink:http://securityreason.com/securityalert/3645
resource:
hyperlink:http://securitytracker.com/id?1006352
resource:Exploit
hyperlink:http://www.securityfocus.com/archive/1/archive/1/315583/30/25430/threaded
resource:
hyperlink:http://www.securityfocus.com/bid/7147
resource:
hyperlink:https://exchange.xforce.ibmcloud.com/vulnerabilities/11571

相关推荐: Oracle 8 Server ‘TNSLSNR80.EXE’ DoS Vulnerability

Oracle 8 Server ‘TNSLSNR80.EXE’ DoS Vulnerability 漏洞ID 1103283 漏洞类型 Failure to Handle Exceptional Conditions 发布时间 2001-04-18 更新时间 …