Nessus Plugin #11048

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Resin DOS device path disclosure

Family:

CGI abuses

Category:

mixed

Copyright:

This script is Copyright (C) 2002 Michel Arboi

Summary:

Tests for Resin path disclosure vulnerability

Version:

$Revision: 1.10 $

Cve_id:

-

Bugtraq_id:

5252

Xrefs:

-

Description:

Resin will reveal the physical path of the webroot
when asked for a special DOS device, e.g. lpt9.xtp

An attacker may use this flaw to gain further knowledge
about the remote filesystem layout.



Solution : Upgrade to a later software version.

Risk factor : Low