Nessus Plugin #11017

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

directory.php

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2002 Michel Arboi

Summary:

Checks for the presence of /directory.php

Version:

$Revision: 1.15 $

Cve_id:

CAN-2002-0434

Bugtraq_id:

4278

Xrefs:

-

Description:

The 'directory.php' file is installed.
1. This tool allows anybody to read any directory.
2. It is possible to execute arbitrary code with the rights
of the HTTP server.

Solution : remove 'directory.php'.

Risk factor : High