Please confirm Information disclosure

Ethan Blanton elb at pidgin.im
Wed Mar 1 09:22:27 EST 2017


Frank Vickers wrote:
> Not sure if this blog is related as well but it provides a lot of information disclosure errors
> 
> http://pidgin.im/~seanegan/blog/

This blog is broken and should be fixed or retired.  It may be a
potential problem.

> Also
> https://pidgin.im/shared/img/
> 
> provides possible backdoor vulnerabilities. Please confirm.

This, I completely do not understand.  What is your concern here?
That auto-indexing is enabled for this directory containing nothing
but static, public content linked elsewhere on the site?  Please
clarify your concern.

Ethan


More information about the security mailing list