FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

popfile file disclosure

Affected packages
popfile <= 0.21.1_2

Details

VuXML ID 12c7b7ae-ec90-11d8-b913-000c41e2cdad
Discovery 2004-08-02
Entry 2004-08-12

John Graham-Cumming reports that certain configurations of POPFile may allow the retrieval of any files with the extensions .gif, .png, .ico, .css, as well as some files with the extension .html.

References

Message http://sourceforge.net/mailarchive/forum.php?thread_id=5248725&forum_id=12356