Description
The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL.
References
- thintune-url-obtain-information(16798) vdb-entry
- 10794 vdb-entry
- 12154 third-party-advisory
- 8249 vdb-entry
- 1010770 vdb-entry
- 20040724 eSeSIX Thintune thin client multiple vulnerabilities mailing-list