CVE:CVE-2006-6617
CNNVD:CNNVD-200612-390
Microsoft Project Server 2003中的projectserver/logon/pdsrequest.asp存在信息泄露漏洞。远程认证用户可以通过GetInitializationData请求获取SQL数据库的MSProjectUser密码(在响应的UserName和Password标签中包含该信息) 。
solution:Upgrade microsoft project_server to a higher version than 2003,and avoid the version 2003