Nessus Plugin #11944

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Snif File Disclosure

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2003 Noam Rathaus

Summary:

Checks for the version of Snif

Version:

$Revision: 1.5 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

It is possible to make the remote host return the content of any world
readable file by requesting a path outside the bound HTML root directory
from the Snif program.

An attacker may use this flaw to view sensitive files that reside on the
remote host.

Solution : Upgrade to Snif version 1.2.5 or newer
Risk factor : Medium