Exploit Cobalt RaQ 2.0/3.0 - Apache .htaccess Disclosure

[Exploiter]

EDB-ID

19828

Проверка EDB

1. Пройдено

Автор

PAUL SCHREIBER

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

cve-2000-0234

Дата публикации

2000-03-31

Cobalt RaQ 2.0/3.0 - Apache .htaccess Disclosure

source: https://www.securityfocus.com/bid/1083/info

The default configuration of Cobalt Raq2 and Raq3 servers allows remote access to .htaccess files. This could lead to unauthorized retrieval of username and password information for restricted portions of a website hosted on the server. 

Make a regular GET request, specifying an .htaccess file ie:
http ://target/path/.htaccess