Description
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type (1) 0x2728, which provides operating system and path information; (2) 0x274e, which lists Ethernet adapters; (3) 0x2726, which provides filesystem information; (4) 0x274f, which specifies the printer driver; or (5) 0x2757, which provides recent log entries.
References
- ADV-2008-0666 vdb-entry
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
- 3698 third-party-advisory
- 27951 vdb-entry
- http://aluigi.org/poc/doubletakedown.zip
- 29075 third-party-advisory
- 20080222 Multiple vulnerabilities in Double-Take 5.0.0.2865 mailing-list