Nessus Plugin #15165

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA328] DSA-328-1 webfs

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-328-1 webfs

Version:

$Revision: 1.4 $

Cve_id:

CAN-2003-0445

Bugtraq_id:

7990

Xrefs:

DSA:328

Description:

webfs, a lightweight HTTP server for static content, contains a buffer
overflow whereby a long Request-URI in an HTTP request could cause
arbitrary code to be executed.
For the stable distribution (woody) this problem has been fixed in
version 1.17.1.
The old stable distribution (potato) does not contain a webfs package.
For the unstable distribution (sid) this problem will be fixed soon.
We recommend that you update your webfs package.


Solution : http://www.debian.org/security/2003/dsa-328
Risk factor : High