Nessus Plugin #11949

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Snif Cross Site Scripting

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2003 Noam Rathaus

Summary:

Checks for the Snif Cross Site Scripting

Version:

$Revision: 1.6 $

Cve_id:

-

Bugtraq_id:

9179

Xrefs:

-

Description:

The remote host is running the 'Snif' CGI suite. There is a vulnerability in
it which may allow an attacker to insert a malicious HTML and/or Javascript
snipet in the response returned to a third party user (this problem is
known as a cross site scripting bug).


Solution: None at this time - disable this CGI suite
Risk factor: Medium