CVE-2007-0979: Infoleak
Published Feb 16, 2007
·Updated
Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file contents) via a "crafted URL."
Affected Software
2 affected components
Lifetype LifeType<=1.1.5
Lifetype LifeType<=1.2_beta_1
Event History
Feb 16, 2007
CVE Published
01:28 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
Which LifeType deployments are affected?
LifeType versions before 1.1.6 are affected. The 1.2 branch is affected before 1.2-beta2.
2
What does an attacker need to exploit this issue?
The issue can be exploited remotely using a crafted URL. No authentication is required according to the supplied attack vector.
3
What is the impact of successful exploitation?
A successful attacker may obtain sensitive information, specifically file contents. The provided impact data indicates confidentiality impact only, with no integrity or availability impact stated.