CVE-2008-3728 Information

Description

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control which allows remote attackers to determine the installation path IP addresses and error messages via direct requests to files under LOG/.

Reference

http://marc.info/?l=bugtraq&m=121881329424635&w=2 http://secunia.com/advisories/31534 http://securityreason.com/securityalert/4172 http://www.oliverkarow.de/research/mailscan.txt http://www.securityfocus.com/bid/30700 https://exchange.xforce.ibmcloud.com/vulnerabilities/44518