| Google Mini Search Appliance Path Disclosure Weakness
Patrick Webster has reported a weakness in Google Mini Search Appliance, which can be exploited by malicious people to disclose certain system information. The weakness is caused due to the full web server path being disclosed in error messages when performing a search with an invalid "client" parameter. The weakness has been reported in version 4.4.102.M.36. Other versions may also be affected.
Solution:
Grant only trusted users access to the appliance.
Provided and/or discovered by:
Patrick Webster
Changelog:
2006-09-29: Added CVE reference.
Original Advisory:
http://users.tpg.com.au/adsl2dvp/advisories/200609-googlemini.txt
.
Google Updates Search Appliance
Google on Tuesday updated its Search Appliance hardware for businesses, expanding capacity to up to 30 million documents and adding a number of new features. Users can now specify date ranges in their searches, as well as set price and number ranges. The device doesn't come cheap, however; the base price for indexing 500,000 documents is $30,000, with larger models reaching six figures. Google has also added 10 more languages to the Search Appliance, which now supports 16 in total. Current customers with the GB-5005 and GB-8008 can download the update from Google's support site. .
|
