Microsoft Project Server 2003 "pdsrequest.asp" File Information Disclosure : Hackers Center : Internet Security Archive: Exploits, Patch, Security Articles, Advisories

セキュリティ

Microsoft Project Server 2003で認証されたユーザがSQLサーバー上でのMSProjectUserアカウントのユーザー名とパスワードを知ることができる脆弱性があるそうです。

This issue is due to an error when handling HTTP POST requests passed to the "logon/pdsrequest.asp" script, which could be exploited by authenticated attackers to disclose the username and password of the "MSProjectUser" SQL account.