Exploit Positive Software H-Sphere Winbox 2.4 - Sensitive Logfile Content Disclosure

[Exploiter]

EDB-ID

25636

Проверка EDB

1. Пройдено

Автор

MORNING WOOD

Тип уязвимости

LOCAL

Платформа

WINDOWS

CVE

cve-2005-1606

Дата публикации

2005-05-09

source: https://www.securityfocus.com/bid/13559/info

It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files.

As a result, user credentials could be exposed to other local users who have permissions to access the log files. 

C:\HSphere.NET\log\action.log
C:\HSphere.NET\log\resources.log