CVE-2007-4151 The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via (1) a LOG.ON command, which reveals the logging pathname in the....
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via (1) a LOG.ON command, which reveals the logging pathname in the server response; (2) a VER command, which reveals the version number in the server response; and (3) a connection, which reveals the version number in the banner.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| visionsoft audit | = 12.4.0.0 | No fix listed |
References
- 46981 vdb-entry
- 46982 vdb-entry
- 46983 vdb-entry
- www.portcullis.co.uk
- www.portcullis.co.uk
- 25153 vdb-entry