Test ID:	10641
Category:	CGI abuses
Title:	mailnews.cgi
Summary:	Checks for the presence of mailnews.cgi
Description:	Description: The 'mailnews' cgi is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon (usually root or nobody). Solution : remove it from /cgi-bin. Risk factor : High
Cross-Ref:	BugTraq ID: 2391 Common Vulnerability Exposure (CVE) ID: CVE-2001-0271 Bugtraq: 20010218 mailnews.cgi (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-02/0347.html http://www.securityfocus.com/bid/2391
Copyright	This script is Copyright (C) 2001 Renaud Deraison

This is only one of 58962 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: