Sambar Server Cleartext Password Transmission

medium Nessus Plugin ID 11585

Language:

Synopsis

The remote web server allows credentials to be transmitted in cleartext.

Description

The remote Sambar server allows users to log in without using SSL. A man-in-the-middle attacker can exploit this to capture the passwords of the users of this server. The attacker can then use these to access the web mail accounts and modify the web pages on behalf of the users of the system.

Solution

Use Sambar on top of SSL.

Plugin Details

Severity: Medium

ID: 11585

File Name: sambar_plaintext.nasl

Version: 1.15

Type: remote

Family: Web Servers

Published: 5/7/2003

Updated: 8/8/2018

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: www/sambar

Detections

Analytics