Nessus Plugin #11801

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Format string on HTTP method name

Family:

Gain root remotely

Category:

destructive_attack

Copyright:

This script is Copyright (C) 2003 Michel Arboi

Summary:

Sends an HTTP request with %s as a method

Version:

$Revision: 1.5 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

The remote web server seems to be vulnerable to a format string attack
on the method name.
An attacker might use this flaw to make it crash or even execute
arbitrary code on this host.


Solution : upgrade your software or contact your vendor and inform him
of this vulnerability

Risk factor : High