Detections
Analytics
Sambar Server Multiple CGI Environment Variable Disclosure
medium Nessus Plugin ID 11775
Language:
Synopsis
The remote web server contains CGI scripts that are affected by information disclosure vulnerabilities.Description
The remote web server appears to be Sambar Server and makes available the 'environ.pl' and/or 'testcgi.exe' CGI scripts. These are included by default and reveal the server's installation directory along with other information that could prove useful to an attacker.Note that this version is also likely to be affected by other issues, including arbitrary code execution, although this plugin has not checked for them.
Solution
Delete the affected CGI scripts.See Also
Plugin Details
Severity: Medium
ID: 11775
File Name: sambar_cgi_path_disclosure.nasl
Version: 1.19
Type: remote
Family: CGI abuses
Published: 6/25/2003
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.7
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
Required KB Items: www/sambar
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 3/27/2003
Reference Information
CVE: CVE-2003-1284