DirectAdmin & amp; #39; mysql_backup & amp; #39; Folder Information Leakage vulnerability and

Affected Versions:
JBMC Software DirectAdmin 1.33.6
JBMC Software DirectAdmin 1.33.4
JBMC Software DirectAdmin 1.33.3
JBMC Software DirectAdmin 1.30.2
JBMC Software DirectAdmin 1.30.1
JBMC Software DirectAdmin 1.38
JBMC Software DirectAdmin 1.351
JBMC Software DirectAdmin 1.292

Vulnerability description:
 

DirectAdmin is a powerful VM online management system.
DirectAdmin creates the MySQL database backup file in the global readable "mysql_backups" folder, which can cause leakage of the MySQL database backup content.
To successfully exploit the vulnerability, you must use CustomBuild to update the MySQL database and set "mysql_backup" to "yes ".

<* Reference
Http://www.directadmin.com/features.php? Id = 1209
Http://secunia.com/advisories/44420/
*>

Vendor solutions
DirectAdmin 1.381 has fixed this vulnerability. We recommend that you download and use it:
Http://www.directadmin.com/