Cart32 “expdate” 管理信息泄露漏洞

漏洞ID	1105814	漏洞类型	设计错误
发布时间	2000-05-03	更新时间	2005-05-02
CVE编号	CVE-2000-0430	CNNVD-ID	CNNVD-200005-022
漏洞平台	Windows	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/20019
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200005-022

|漏洞详情

Cart32存在漏洞，远程攻击者可以通过在URL请求中附加/expdate访问敏感调试信息。

|漏洞EXP

source: http://www.securityfocus.com/bid/1358/info

By appending the string "/expdate" to a request for the cart32.exe executable, (http: //target/cgi-bin/cart32.exe/expdate) an attacker can access an error message followed by a debugging page containing the server variables, the Cart32 administration directory and possibly the contents of the cgi-bin.

http: //target/cgi-bin/cart32.exe/expdate

|参考资料

来源:BID
名称:1358
链接:http://www.securityfocus.com/bid/1358
来源:BUGTRAQ
名称:20000503AnotherinterestingCart32command
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=95738697301956&w;=2

相关推荐: FloosieTek FTGatePro 1.22 – Mail Server Cross-Site Scripting

FloosieTek FTGatePro 1.22 – Mail Server Cross-Site Scripting 漏洞ID 1054137 漏洞类型发布时间 2003-09-02 更新时间 2003-09-02 CVE编号 N/A CNNVD-ID …