|
|
|
|
|
|
|
| |
Glimpse HTTP aglimpse Arbitrary Command Execution |
|
| This script is Copyright (C) 1999-2010 Tenable Network Security, Inc. |
|
|
| Family | CGI abuses |
| Nessus Plugin ID | 10095 (glimpse.nasl) |
| Bugtraq ID | 2026
|
| CVE ID | CVE-1999-0147
|
|
| Description: |
Synopsis :
The remote web server is running a web application that is affected by
an arbitrary command execution vulnerability.
Description :
The remote web server is running GlipmseHTTP. The installed version
suffers from a remote command execution vulnerability in the
'aglimpse' component.
Note that we could not actually check for the presence of this
vulnerability, and only checked for the existence of the 'aglimpse'
CGI.
Solution :
There is no known solution at this time.
Risk factor :
High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
|
|
|
|
|
|
