Full Disclosure mailing list archives
[vuln.sg] Cybozu Products Arbitrary File Retrieval Vulnerability
From: TAN Chew Keong <vulnpost-remove () vuln sg>
Date: Mon, 28 Aug 2006 15:00:19 +0800
[vuln.sg] Vulnerability Research Advisory Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary ------- A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files accessible to the web server process. Tested Versions --------------- Cybuzu Office Version 6.5 (Build 1.2 20050427121735) for Windows Cybozu Share 360 Version 2.5 (Build 0.2 20050121115231) for Windows Details ------- http://vuln.sg/cybozu-en.html http://vuln.sg/cybozu-jp.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- [vuln.sg] Cybozu Products Arbitrary File Retrieval Vulnerability TAN Chew Keong (Aug 28)