Nessus Plugin #10783

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

PCCS-Mysql User/Password Exposure

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2001 Alert4Web.com

Summary:

Checks for dbconnect.inc

Version:

$Revision: 1.8 $

Cve_id:

CVE-2000-0707

Bugtraq_id:

1557

Xrefs:

-

Description:

It is possible to read the include file of PCCS-Mysql,
dbconnect.inc on the remote server.

This include file contains information such as the
username and password used to connect to the database.

Solution:
Versions 1.2.5 and later are not vulnerable to this issue.
A workaround is to restrict access to the .inc file.

Risk factor : High