TITLE: iE Integrator Configuration Information Disclosure Weakness SECUNIA ADVISORY ID: SA18813 VERIFY ADVISORY: http://secunia.com/advisories/18813/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: >From remote SOFTWARE: iE Integrator 4.x http://secunia.com/product/8074/ DESCRIPTION: D Scholefield has reported a weakness in iE Integrator, which can be exploited by malicious people to disclose certain system information. The weakness is caused due to certain system information (e.g. directory path, internal IP address) being disclosed in an error message when a non-existing script within the ieIntegrator application directory (apps) is requested. Successful exploitation requries that a custom error message has not been defined in the "acm.ini" file The weakness has been reported in version 4.4.220114. SOLUTION: Configure a custom error message in the "acm.ini" file. PROVIDED AND/OR DISCOVERED BY: D Scholefield, IRM. ORIGINAL ADVISORY: http://www.irmplc.com/advisory016.htm ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------