|
|
Family: Netware --> Category: infos
Novell NetWare HTTP POST Perl Code Execution Vulnerability Vulnerability Scan
Vulnerability Scan Summary
Webserver perl handler executes arbitrary POSTs
Detailed Explanation for this Vulnerability Test
Novell Netware contains multiple default web server installations.
The Netware Enterprise Web Server (Netscape/IPlanet) has a perl
handler which will run arbitrary code given to in a POST request
version 5.x (through SP4) and 6.x (through SP1) are effected.
Threat Level: High
Solution : Install 5.x SP5 or 6.0 SP2
Additionally, the enterprise manager web interface may be used to
unmap the /perl handler entirely. If it is not being used, minimizing
this service would be appropriate.
Click HERE for more information and discussions on this network vulnerability scan.
|
