The host is running Apache Rave and is prone to information disclosure vulnerability.

Successful exploitation will allow remote attackers to obtain sensitive information about all user accounts via the offset parameter. Impact Level: Application

Upgrade to Apache Rave 0.20.1 or later, For updates refer to http://rave.apache.org/downloads.html

The flaw is due to error in handling of User RPC API, returns the full user object, including the salted and hashed password.

Apache Rave versions 0.11 to 0.20

• http://packetstormsecurity.com/files/120769/
• http://seclists.org/fulldisclosure/2013/Mar/127
• http://www.exploit-db.com/exploits/24744/
• http://www.securityfocus.com/archive/1/525982/30/0/threaded
• http://xforce.iss.net/xforce/xfdb/82758

---

Updated on 2015-03-25