CVE-2005-0440 Information

Description

ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL.

Reference

http://midas.psi.ch/elogs/Forum/941 http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880 http://www.securityfocus.com/bid/12556