Test ID:	1.3.6.1.4.1.25623.1.0.55620
Category:	CGI abuses
Title:	EZ Systems HTTPBench Arbitrary File Disclosure
Summary:	NOSUMMARY
Description:	Description: A vulnerable version of HTTPBench appears to be installed which is allowing for the disclosure of arbitrary files on your system as a result of insufficient sanitization of the 'AnalyseSite' parameter. Attackers may use this to disclose any file accessible by the web server. Solution: Upgrade to a later version of the software if one is available. Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	BugTraq ID: 6153 Common Vulnerability Exposure (CVE) ID: CVE-2002-1818 http://www.securityfocus.com/bid/6153 Bugtraq: 20021110 benchmark tool for HTTP pages. (Google Search) http://online.securityfocus.com/archive/1/299235 http://www.iss.net/security_center/static/10589.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.