Intrusion Prevention

Netmechanica.NetDecision.Traffic.Grapher.Information.Disclosure

Description

This indicates an attack attempt against a Information Disclosure vulnerability in NetDecision Traffic Grapher Server.
The vulnerability is caused by an error when the vulnerable software handles malformed HTTP requests. It allows a remote attacker to view arbitrary file via sending a crafted HTTP request.

Affected Products

NetMechanica NetDecision before 4.6.1

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

Recommended Actions

Upgrade to the latest version,available from the web site.
http://www.netmechanica.com/news/?news_id=26

CVE References

CVE-2012-1466