Detections
Analytics

ScriptLogic $LOGS Share Remote Information Disclosure

medium Nessus Plugin ID 11561

Synopsis

Sensitive data may be accessed on the remote server.

Description

The remote host has an accessible LOGS$ share.

ScriptLogic creates this share to store the logs, but does not properly set the permissions on it. As a result, anyone can use it to read or modify, or possibly execute code.

Solution

Limit access to this share to the backup account and domain administrator.

See Also

https://exchange.xforce.ibmcloud.com/vulnerabilities/11922

Plugin Details

Severity: Medium

ID: 11561

File Name: scriptlogic_hidden_share.nasl

Version: 1.20

Type: local

Agent: windows

Family: Windows

Published: 5/4/2003

Updated: 10/27/2023

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Low

Base Score: 2.1

Temporal Score: 1.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2003-1122

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:scriptlogic:scriptlogic

Required KB Items: SMB/share_permissions/enumerated, SMB/share_permissions/logs$, SMB/share_permissions/logs$/EVERYONE/Allow

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 5/1/2003

Reference Information

CVE: CVE-2003-1122

BID: 7476

CERT: 813737