Nessus Plugin #10706

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

McAfee myCIO Directory Traversal

Family:

Remote file access

Category:

attack

Copyright:

This script is Copyright (C) 2001 SecuriTeam

Summary:

McAfee myCIO Directory Traversal

Version:

$Revision: 1.13 $

Cve_id:

CVE-2001-1144

Bugtraq_id:

3020

Xrefs:

-

Description:

The remote host runs McAfee's myCIO HTTP Server, which is vulnerable to Directory Traversal.
A security vulnerability in the product allows attackers to traverse outside the normal HTTP root path, and this exposes access to sensitive files.

Solution: Configure your firewall to block access to this port (TCP 6515). Use the Auto Update feature of McAfee's myCIO to get the latest version.

Risk factor : High