CVE-2009-3452 WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathn...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| radactive i-load | <= 2008.2.4.0 | No fix listed |
| radactive i-load | = 1.6.3 | No fix listed |
| radactive i-load | = 1.6.3.1 | No fix listed |
| radactive i-load | = 1.6.3.2 | No fix listed |
| radactive i-load | = 1.6.3.3 | No fix listed |
| radactive i-load | = 1.7.0.0 | No fix listed |
| radactive i-load | = 1.7.0.1 | No fix listed |
| radactive i-load | = 1.7.0.2 | No fix listed |
| radactive i-load | = 1.7.0.3 | No fix listed |
| radactive i-load | = 1.7.0.4 | No fix listed |
| radactive i-load | = 1.7.0.5 | No fix listed |
| radactive i-load | = 1.7.0.6 | No fix listed |
| radactive i-load | = 1.7.0.7 | No fix listed |
| radactive i-load | = 1.7.0.8 | No fix listed |
| radactive i-load | = 1.7.0.9 | No fix listed |
| radactive i-load | = 1.7.0.10 | No fix listed |
| radactive i-load | = 1.7.0.11 | No fix listed |
| radactive i-load | = 1.7.0.12 | No fix listed |
| radactive i-load | = 1.7.5.0 | No fix listed |
| radactive i-load | = 1.7.5.1 | No fix listed |
| radactive i-load | = 1.7.5.2 | No fix listed |
| radactive i-load | = 1.7.6.0 | No fix listed |
| radactive i-load | = 1.7.6.1 | No fix listed |
| radactive i-load | = 1.7.7.0 | No fix listed |
| radactive i-load | = 1.7.7.1 | No fix listed |
Show 21 more
| Product | Affected versions | Fixed in |
|---|---|---|
| radactive i-load | = 1.7.7.2 | No fix listed |
| radactive i-load | = 1.7.7.3 | No fix listed |
| radactive i-load | = 1.7.7.4 | No fix listed |
| radactive i-load | = 1.7.7.5 | No fix listed |
| radactive i-load | = 1.7.7.6 | No fix listed |
| radactive i-load | = 1.7.7.8 | No fix listed |
| radactive i-load | = 1.7.7.9 | No fix listed |
| radactive i-load | = 1.7.7.11 | No fix listed |
| radactive i-load | = 2008.1.0.0 | No fix listed |
| radactive i-load | = 2008.1.0.1 | No fix listed |
| radactive i-load | = 2008.1.0.2 | No fix listed |
| radactive i-load | = 2008.1.1.0 | No fix listed |
| radactive i-load | = 2008.1.2.0 | No fix listed |
| radactive i-load | = 2008.1.2.1 | No fix listed |
| radactive i-load | = 2008.1.3.0 | No fix listed |
| radactive i-load | = 2008.2.1.0 | No fix listed |
| radactive i-load | = 2008.2.1.1 | No fix listed |
| radactive i-load | = 2008.2.2.0 | No fix listed |
| radactive i-load | = 2008.2.3.0 | No fix listed |
| radactive i-load | = 2008.2.3.1 | No fix listed |
| radactive i-load | = 2008.2.3.2 | No fix listed |
References
- radnet.radactive.com vendor-advisory
- 23807 third-party-advisory vendor-advisory
- 58194 vdb-entry
- 20090917 SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities mailing-list
- www.sec-consult.com