medium5.0
CVE-2008-6440
Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ...
Impact
Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerberus | Cerberus Helpdesk | Version 2.5 |
| Webgroupmedia | Cerberus Helpdesk | through 3.3 Versions 0.97.3, 2.0, 2.1, 2.2, 2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30344
- http://www.cerb4.com/blog/2008/05/15/important-security-patch-40-build-599/
- http://www.securityfocus.com/bid/29335
- http://secunia.com/advisories/30344
- http://www.cerb4.com/blog/2008/05/15/important-security-patch-40-build-599/
- http://www.securityfocus.com/bid/29335