|Category:||Remote file access|
|Title:||3com RAS 1500 configuration disclosure|
The remote 3com SuperStack II Remote Access System 1500 discloses
its user configuration (user_settings.cfg) when the file is
requested through the web interface.
This file contains the password (in clear text) of this device
as well as other sensitive information.
An attacker may use this flaw to gain the control of this host
Solution : filter incoming traffic to this host
Risk factor : High
BugTraq ID: 7176|
|Copyright||This script is Copyright (C) 2003 Renaud Deraison|
|This is only one of 87302 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.