Nessus Plugin #11005

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

LocalWeb2000 remote read

Family:

Remote file access

Category:

infos

Copyright:

This script is Copyright (C) 2002 Jason Lidow <jason@brandx.net>

Summary:

Checks for LocalWeb2000

Version:

$Revision: 1.11 $

Cve_id:

CVE-2001-0189

Bugtraq_id:

2268, 4820, 7947

Xrefs:

-

Description:

The remote host is running LocalWeb2000.

Version 2.1.0 of LocalWeb2000 allows an attacker to view protected
files on the host's computer.

Example: http://www.vulnerableserver.com/./protectedfolder/protectedfile.htm

It may also disclose the NetBIOS name of the remote host when
it receives malformed directory requests.

Solution: Contact http://www.intranet-server.co.uk for an update.

Risk factor : High