Bradford CampusManager v3.1(6) Sensitive Data Disclosure

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Bradford CampusManager v3.1(6) Sensitive Data Disclosure
From: john@xxxxxxxxxxxxxx
Date: 2 May 2007 22:44:17 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Bradford CampusManager v3.1(6) Sensitive Data Disclosure

The following directories should be protected from world readability. Child 
folders include backup, log, and configuration files.

http://cmnms.target.com:8080/runTime/
http://cmnms.target.com:8080/remediationReports/

Vulnerable: CampusManager Network Control Application Server v3.1(6) (others 
should also be affected)

John Martinelli
john@xxxxxxxxxxxxxx
http://john-martinelli.com

May 3rd, 2007

Prev by Date: [security bulletin] HPSBTU02179 SSRT061256 rev.1 - HP Tru64 UNIX Running the ps command, Local Disclosure of Sensitive Information
Next by Date: [ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability
Previous by thread: [security bulletin] HPSBTU02179 SSRT061256 rev.1 - HP Tru64 UNIX Running the ps command, Local Disclosure of Sensitive Information
Next by thread: [ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability
Index(es):
- Date
- Thread