|
Family: CGI abuses --> Category: infos
wwwboard passwd.txt Vulnerability Scan
Vulnerability Scan Summary Searches for the existence of /wwwboard/passwd.txt
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a CGI application that is prone to
information disclosure.
Description :
The remote host is running WWWBoard, a bulletin board system written
by Matt Wright.
This board system comes with a password file (passwd.txt) installed
next to the file 'wwwboard.html'. A possible hacker may obtain the content
of this file and decode the password to modify the remote www board.
See also :
http://archives.neohapsis.com/archives/bugtraq/1998_3/0746.html
http://archives.neohapsis.com/archives/bugtraq/1999-q3/0993.html
Solution :
Configure the wwwadmin.pl script to change the name and location of
'passwd.txt'.
Threat Level:
Medium / CVSS Base Score : 4
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:C)
Click HERE for more information and discussions on this network vulnerability scan.
|