Signature Detail
Short Name |
HTTP:INFO-LEAK:BANNERMATIC |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
Bannermatic Information Disclosure |
Release Date |
2005/08/02 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Bannermatic Information Disclosure
This signature detects attempts to access several files contained in the Bannermatic software suite. The files ban.log, ban.bak, ban.dat and banmat.pwd contain sensitive data.
Extended Description
Bannermatic is a banner ad rotation system maintained by Joe DePasquale of GetCruising. Bannermatic is subject to an information disclosure issue. Reportedly, ban.log, ban.bak, ban.dat and banmat.pwd are world readable and all contain sensitive data. Obtaining the information contained within either file, could result in the attacker launching further attacks against the host.
Affected Products
- Joe DePasquale Bannermatic 1.0.0
- Joe DePasquale Bannermatic 2.0.0
- Joe DePasquale Bannermatic 3.0.0
References
- BugTraq: 4738
- CVE: CVE-2002-2342
- URL: http://www.getcruising.com/crypt/banmat.html