Exploit Whale Communications e-Gap Security Appliance 2.5 - Login Page Source Code Disclosure

[Exploiter]

EDB-ID

23545

Проверка EDB

1. Пройдено

Автор

PROCHECKUP

Тип уязвимости

REMOTE

Платформа

HARDWARE

CVE

null

Дата публикации

2004-01-15

source: https://www.securityfocus.com/bid/9431/info

The e-GAP appliance has been reported prone to a source code disclosure vulnerability. It has been reported that, when the affected appliance handles unexpected HTTP requests it may divulge the source code of the login script. The login page is used to build a simple form for collecting and submitting the username and the password to the e-Gap server. The authentication logic is not part of this page and cannot be viewed by the attacker. The information contained in the login page is not typically sensitive.

TRACE / HTTP/1.0