Test Kennung:	1.3.6.1.4.1.25623.1.0.801246
Kategorie:	Web Servers
Titel:	bozotic HTTP server Information Disclosure Vulnerability
Zusammenfassung:	bozotic HTTP server is prone to an information disclosure vulnerability.
Beschreibung:	Summary: bozotic HTTP server is prone to an information disclosure vulnerability. Vulnerability Insight: The server is not properly handling requests to a user's public_html folder while the folder does not exist. This can be exploited to determine the existence of user accounts via multiple requests for URIs beginning with /~ sequences. Vulnerability Impact: Successful exploitation will allow attacker to determine the existence of a user and potentially disclose the user's files. Affected Software/OS: bozotic HTTP server (aka bozohttpd) versions before 20100621. Solution: Upgrade to bozotic HTTP server version 20100621 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2320 http://secunia.com/advisories/40737 XForce ISS Database: bozohttp-publichtml-info-disclosure(60812) https://exchange.xforce.ibmcloud.com/vulnerabilities/60812
Copyright	Copyright (C) 2010 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.