SAFE TEAM Regulus 2.2 - Staffile Information Disclosure

Author: masud_libra
type: remote
platform: multiple
port: 
date_added: 2004-09-07 
date_updated: 2013-03-05 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/11132/info

SAFE TEAM Regulus is reported prone to an information disclosure vulnerability. It is reported that any user may make a request for the Regulus 'staffile' file hosted on a target server. This file contains a list of Regulus 'staff' users and their corresponding password hashes.

An attacker may employ data that is obtained in this manner to aid in further attacks launched against the vulnerable software.

http://example.com/base-dir/access/stafffile