|
|
Family: CGI abuses --> Category: attack
AspUpload vulnerability Vulnerability Scan
Vulnerability Scan Summary
Checks for the AspUpload software
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains an ASP script that may allow uploading
of arbitrary files.
Description :
At least one example script distributed with AspUpload appears to be
installed on the remote web server. AspUpload is an ASP script that
supports saving and processing files uploading through other web
scripts, and the example script likely contains a flaw that allows an
attacker to upload arbitrary files and store them anywhere on the
affected drive.
See also :
http://marc.theaimsgroup.com/?l=bugtraq&m=100715294425985&w=2
Solution :
Unknown at this time.
Threat Level:
High / CVSS Base Score : 7
(AV:R/AC:L/Au:NR/C:P/A:P/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
