Nessus Plugin #12211

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

File Disclosure in SurgeLDAP

Family:

General

Category:

infos

Copyright:

This script is Copyright (C) 2004 Noam Rathaus

Summary:

Detect SurgeLDAP File Disclosure

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

10103

Xrefs:

-

Description:

There is a vulnerability in the current version of SurgeLDAP
that allows an attacker to retrieve arbitrary files
from the webserver that reside outside the bounding HTML root
directory.

Risk factor : High