Detections
Analytics
Alt-N WebAdmin Multiple Vulnerabilities
high Nessus Plugin ID 11771
Language:
Synopsis
The remote CGI is vulnerable to multiple flaws.Description
webadmin.dll was found on the web server. Old versions of this CGI suffered from numerous problems: - installation path disclosure - directory traversal, allowing anybody with administrative permission on WebAdmin to read any file - buffer overflow, allowing anybody to run arbitrary code on the server with SYSTEM privileges.Note that no attack was performed, and the version number was not checked, so this might be a false alert
Solution
Upgrade to Alt-N WebAdmin 2.0.5 or later.See Also
Plugin Details
Severity: High
ID: 11771
File Name: webadmin.nasl
Version: 1.29
Type: remote
Family: CGI abuses
Published: 6/24/2003
Updated: 1/19/2021
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: Settings/ParanoidReport
Exploit Ease: No exploit is required
Vulnerability Publication Date: 6/24/2003
Exploitable With
Metasploit (Alt-N WebAdmin USER Buffer Overflow)
Reference Information
CVE: CVE-2003-0471, CVE-2003-1463
CWE: 20