|
|
Vulnerability Assessment & Network Security Forums |
|||||||||
|
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> CGI abuses >> Wordit Logbook File Disclosure Vulnerability Vulnerability Assessment Details
|
Wordit Logbook File Disclosure Vulnerability |
||
|
Searches for the existence of logbook.pl Detailed Explanation for this Vulnerability Assessment Summary : The remote web server contains a CGI script that suffers from an information disclosure vulnerability. Description : The WordIt 'logbook.pl' CGI script is installed on the remote host. This script has a well documented security flaw that lets anyone read arbitrary files on this host. See also : http://www.securityfocus.com/archive/1/314275 Solution : Remove the script. Network Security Threat Level: Medium / CVSS Base Score : 4 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:C) Networks Security ID: 7043 Vulnerability Assessment Copyright: This script is Copyright (C) 2003 Renaud Deraison |
||
|
Hubs |
|
||
|
No Discussions have been posted on this vulnerability. |