Nessus Plugin #11163

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

msmmask.exe

Family:

CGI abuses

Category:

attack

Copyright:

This script is Copyright (C) 2002 Michel Arboi

Summary:

Checks for the presence of /cgi-bin/msmMask.exe

Version:

$Revision: 1.12 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

The msmmask.exe CGI is installed.
Some versions allow an attacker to read the source of any
file in your webserver's directories by using the 'mask'
parameter.

Solution : Upgrade your MondoSearch to version 4.4.5156 or later.

Risk factor : Low