Nessus Plugin #10616

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

webspirs.cgi

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2001 Laurent Kitzinger

Summary:

Checks for the presence of /cgi-bin/webspirs.cgi

Version:

$Revision: 1.13 $

Cve_id:

CAN-2001-0211

Bugtraq_id:

2362

Xrefs:

-

Description:

The 'webspirs.cgi' CGI is installed. This CGI has
a well known security flaw that lets an attacker read arbitrary files
with the privileges of the http daemon (usually root or nobody).

Solution : remove it from /cgi-bin.

Risk factor : High