Nessus Plugin #11657

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Synchrologic User account information disclosure

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2003 John Lampe

Summary:

Determines if Synchrologic is installed

Version:

$Revision: 1.4 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

The remote host seems to be running Synchrologic Email Accelerator

Synchrologic is a product which allows remote PDA users to synch with email,
calendar, etc.

If this server is on an Internet segment (as opposed to internal), you may
wish to tighten the access to the aggregate.asp page.

The server allows anonymous users to look at Top Network user IDs
Example : http://IP_ADDRESS/en/admin/aggregate.asp

Risk factor : Low