Nessus Plugin #15710

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

cgi.rb

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks for the presence of cgi.rb

Version:

$Revision: 1.1 $

Cve_id:

CAN-2004-0983

Bugtraq_id:

-

Xrefs:

-

Description:

The 'cgi.rb' CGI is installed. Some versions is vulnerable to
remote denial of service.

By sending a specially crafted HTTP POST request, a malicious user can force
the remote host to consume a large amount of CPU ressources.

*** Warning : Nessus solely relied on the presence of this CGI, it did not
*** determine if you specific version is vulnerable to that problem

Solution : Verify that your version is at least 1.8.1 or later
Risk factor : High