CVE-2004-2353 | BDVDB-2026-11995 Detail

Description#

BugPort before 1.099 stores its configuration file (conf/config.conf) under the web document root with a file extension that is not normally parsed by web servers, which allows remote attackers to obtain sensitive information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/9542
https://exchange.xforce.ibmcloud.com/vulnerabilities/15030
http://secunia.com/advisories/10785/
http://www.incogen.com/downloads/bugport/CHANGELOG.txt

Exploit#

No public exploit known

History#

Version 12005-08-16Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.