Nessus Plugin #11166

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

KF Web Server /%00 bug

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2002 Michel Arboi

Summary:

Make a request like http://www.example.com/%00

Version:

$Revision: 1.6 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

Requesting a URL with '/%00' appended to it
makes some versions of KF Web Server to dump the listing of the
directory, thus showing potentially sensitive files.

Risk factor : High
Solution : upgrade to the latest version of KF Web Server