smb2www Proxy Bypass

medium Nessus Plugin ID 11377

Synopsis

The remote CGI is vulnerable to an access control breach.

Description

The remote host is running smb2www - a SMB to WWW gateway.

An attacker may use this CGI to use this host as a proxy - The attacker can then connect to a third-party SMB host without revealing an IP address.

Solution

Enforce proper access controls to this CGI.

Plugin Details

Severity: Medium

ID: 11377

File Name: smb2www_installed.nasl

Version: 1.17

Type: remote

Family: CGI abuses

Published: 3/14/2003

Updated: 4/11/2022

Configuration: Enable thorough checks

Asset Inventory: true

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:smb2www:smb2www

Excluded KB Items: Settings/disable_cgi_scanning

Detections

Analytics