|
Family: CGI abuses --> Category: infos
glimpse Vulnerability Scan
Vulnerability Scan Summary Searches for the existence of /cgi-bin/phf
Detailed Explanation for this Vulnerability Test
The 'glimpse' cgi is installed. This CGI has
a well documented security flaw that lets anyone execute arbitrary
commands with the rights of the http daemon (root or nobody).
Note that we could not actually check for the existence
of this vulnerability, so you may be using a patched
version.
Solution : remove it from /cgi-bin.
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|