CVE-2008-1752 | BDVDB-2026-30178 Detail

Description#

ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for (1) config.ini or (2) database.ini. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/41767
http://sourceforge.net/forum/forum.php?forum_id=809832
http://sourceforge.net/project/shownotes.php?release_id=591272&group_id=221332
http://www.osvdb.org/44399
http://secunia.com/advisories/29769

Exploit#

No public exploit known

History#

Version 12008-04-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.