|
Zope reveals system configuration
|
|
Secunia Advisory:
|
SA7190
|
|
|
Release Date:
|
2002-10-01
|
|
Popularity:
|
3,420 views
|
|
|
Critical:
|
Not critical
|
|
Impact:
|
Exposure of system information
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Zope 2.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
By supplying invalid XML-RPC requests to Zope, Zope reveals its complete installation path.
Solution:
The development version 2.6.0b1 and 2.5.1b2 are not vulnerable. One may argue whether this bug is serious enough that one should rely on a development release.
The exposure of a system paths is rarely relevant to other than skilled hackers.
Provided and/or discovered by:
Rossen Raykov
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
