Nessus Plugin #11165

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

vpasswd.cgi

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2002 Michel Arboi

Summary:

Checks for the presence of vpasswd.cgi

Version:

$Revision: 1.6 $

Cve_id:

-

Bugtraq_id:

6038

Xrefs:

-

Description:

The 'vpasswd.cgi' CGI is installed. Some versions
do not properly check for special characters and allow
a cracker to execute any command on your system.

*** Warning : Nessus solely relied on the presence of this CGI, it did not
*** determine if you specific version is vulnerable to that problem

Solution : remove it from /cgi-bin.

Risk factor : High