TalentSoft Web+Shop webplus.exe path disclosure
| webplusshop-webplus-path-disclosure (25802) |  Low Risk |
Description:
Web+Shop could allow a remote attacker to obtain sensitive information. A remote attacker could send a specially-crafted URL to the webplus.exe file using the 'storeid' parameter causing an error message to be returned that contains the full installation path for Web+Shop. An attacker could use this information to launch additional attacks on the vulnerable system.
Consequences:
Obtain Information
Remedy:
Upgrade to the latest version of TalentSoft's Web+Shop (6.0 or later), available from the TalentSoft's Web+Shop Web site. See References.
References:
- Bugtraq Mailing List, Fri Apr 07 2006 - 01:01:28 CDT : TalentSoft Web+Shop Path Disclosure.
- TalentSoft Web site: Web+Shop.
- CVE-2006-1897: Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for Script Not Found Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a Script Not Found error message.
- OSVDB ID: 24621: Web+Shop store.wml storeid Variable Path Disclosure
- SA19662: Web+Shop "storeid" Full Path Disclosure Weakness
Platforms Affected:
- FedoraProject Fedora Core
- FreeBSD FreeBSD
- MandrakeSoft Mandrake Linux
- RedHat Linux
- SCO Caldera OpenLinux
- Sun Solaris SPARC
- SUSE SuSE Linux 9.2
- Turbolinux Turbolinux
- Webplus Web+Shop 5.3.6
Reported:
Apr 13, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net