|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> CGI abuses >> ht://Dig's htsearch potential exposure/dos Vulnerability Assessment Details
|
ht://Dig's htsearch potential exposure/dos |
||
htsearch?-c/nonexistent Detailed Explanation for this Vulnerability Assessment The remote CGI htsearch permits the user to supply his own configuration file using the '-c' switch, as in : /cgi-bin/htsearch?-c/some/config/file This file is not displayed by htsearch. However, if an attacker manages to upload a configuration file to the remote server, it may make htsearch read arbitrary files on the remote host. A possible hacker may also use this flaw to exhaust the resources on the remote host by specifying /dev/zero as a configuration file. Solution: Upgrade to ht://Dig 3.1.6 or newer (http://www.htdig.org/files/snapshots/) Network Security Threat Level: High Networks Security ID: 3410 Vulnerability Assessment Copyright: Copyright (C) 2001 Renaud Deraison |
||
Cables, Connectors |
Cisco ASA5525-FTD-K9 Security Appliance with FirePower Services
$1000.00
NetGate SG-2440 with pfSense Plus Console GNU Router Firewall Security Appliance
$69.99
HP T730 THIN CLIENT 8GB RAM 128GB SSD 4 port Gbe NIC GREAT FOR Firewall pfSense
$120.00
Ubiquiti Networks USG Unifi Security Gateway Router/Firewall
$29.95
Fortinet Fortiwifi 60D FWF-60D Security Appliance Firewall Wifi VPN
$29.99
OPNsense six-port Gigabit router/firewall on Lanner FW-7535 hardware
$69.00
WatchGuard - XTM 3 Series - FS2E5W - 5-port Firewall - with Power Adapter
$19.95
Sophos SG 115W Rev 3 with Power Adapter - Firewall Security Appliance
$65.00
Fortinet Fortiwifi 60D FG-60D Security Appliance Firewall / VPN w/ AC Adapter
$34.97
Fortinet FortiGate-50E / FG-50E Next Generation Firewall (FG-50E) - Acceptable
$49.99
|
||
No Discussions have been posted on this vulnerability. |