Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> CGI abuses >> netscape publishingXpert 2 PSUser problem


Vulnerability Assessment Details

netscape publishingXpert 2 PSUser problem

Vulnerability Assessment Summary
Checks if /PSUser/PSCOErrPage.htm reads any file

Detailed Explanation for this Vulnerability Assessment
The '/PSUser/PSCOErrPage.htm' CGI permits a
malicious user to view any file on the target computer by issuing
a GET request :

GET /PSUser/PSCOErrPage.htm?errPagePath=/file/to/read

Solution : Remove it

Network Security Threat Level: Medium


Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2000 Renaud Deraison

Cables, Connectors

SALE Motherboard USB 9Pin Header Splitter 1to2 Extension Cable Port Multiplier #
$3.07
SALE Motherboard USB 9Pin Header Splitter 1to2 Extension Cable Port Multiplier # pictureNEW Lenovo Yoga 510-15IKB LA-E221P 5B20M32635 Motherboard with i3-7100U CPU UMA
$199.95
NEW Lenovo Yoga 510-15IKB LA-E221P 5B20M32635 Motherboard with i3-7100U CPU UMA pictureMSI Z97 GAMING 5, LGA 1150, Intel Motherboard
$85.0
MSI Z97 GAMING 5, LGA 1150, Intel Motherboard pictureASRock Fatal1ty X399 Professional Gaming sTR4 AMD Motherboard
$1.0
ASRock Fatal1ty X399 Professional Gaming sTR4 AMD Motherboard picture


Discussions

No Discussions have been posted on this vulnerability.