Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> CGI abuses >> smb2www installed


Vulnerability Assessment Details

smb2www installed

Vulnerability Assessment Summary
smb2www Command Execution

Detailed Explanation for this Vulnerability Assessment

The remote host is running smb2www - a SMB to WWW gateway.

A possible hacker may use this CGI to use this host as a proxy -
he can connect to third parties SMB host without revealing
his IP address.

Solution : Enforce proper access controls to this CGI
Network Security Threat Level: Medium

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2003 Renaud Deraison

Cables, Connectors

Dell Poweredge 2600 Scl Server RAID Controller Key Board CN-0J1055 J1055
$8.6
Dell Poweredge 2600 Scl Server RAID Controller Key Board CN-0J1055 J1055 pictureDell PERC H700 SAS RAID Controller / 0R374M, R374M / w/ 512MB Memory Module
$0.99
Dell PERC H700 SAS RAID Controller /  0R374M, R374M / w/ 512MB Memory Module pictureLSI Logic RAID Controller Card LSI 7202XP Price Reduced
$18.95
LSI Logic RAID Controller Card LSI 7202XP Price Reduced pictureDell PR174 PERC 6/E SAS 300MBps PCIe Raid Controller w/ X8483 BBU
$34.95
Dell PR174 PERC 6/E SAS 300MBps PCIe Raid Controller w/ X8483 BBU picture


Discussions

No Discussions have been posted on this vulnerability.