Detections
Analytics

IBM HTTP Server on AS/400 Trailing Slash Source Code Disclosure

medium Nessus Plugin ID 10799

Synopsis

The remote web server is affected by an information disclosure vulnerability.

Description

IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as a .html or .jsp page -- by attaching an '/' to the end of a URL.

Solution

There is no known solution at this time.

See Also

https://seclists.org/bugtraq/2001/Nov/29

Plugin Details

Severity: Medium

ID: 10799

File Name: ibm_server_code.nasl

Version: 1.36

Type: remote

Family: CGI abuses

Published: 11/8/2001

Updated: 4/11/2022

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:ibm:http_server

Required KB Items: www/ibm-http

Exploit Available: true

Exploit Ease: No exploit is required

Reference Information

BID: 3518