|
|
Family: Remote file access --> Category: infos
MetaInfo servers Vulnerability Scan
Vulnerability Scan Summary
Read everything using '../' in the URL
Detailed Explanation for this Vulnerability Test
The remote MetaInfo server
allows remote users to read arbitrary
files by entering '../' in the URL.
For instance :
GET ../smusers.txt HTTP/1.0
will read 'smusers.txt'.
Solution : disable this server or upgrade.
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
