Detections
Analytics

Trend Micro InterScan VirusWall /interscan/cgi-bin/FtpSave.dll Unauthenticated Remote Configuration Manipulation

critical Nessus Plugin ID 10733

Synopsis

A remote service may be reconfigured by unauthorized users.

Description

The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings.

Solution

Filter access to the management interface from the internet.

See Also

http://www.nessus.org/u?9986ffc0

Plugin Details

Severity: Critical

ID: 10733

File Name: interscan_vw_cgi.nasl

Version: 1.29

Type: remote

Family: CGI abuses

Published: 8/23/2001

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 4/13/2001

Reference Information

CVE: CVE-2001-0432

BID: 2579