Test ID:	10470
Category:	CGI abuses
Title:	WebActive world readable log file
Summary:	NOSUMMARY
Description:	Description: It is possible to obtain the remote WebActive logfile by requesting the file /active.log An attacker may use this to obtain valuable information about your site, such as who visits it and how popular it is. Solution : use another web server, as WebActive is not maintained. If you are using WindowsNT, then remove read access to this file. Risk factor : Low
Cross-Ref:	BugTraq ID: 1497 Common Vulnerability Exposure (CVE) ID: CVE-2000-0642 http://www.securityfocus.com/bid/1497 Bugtraq: 20000711 Lame DoS in WEBactive win65/NT server (Google Search) http://www.securityfocus.com/templates/archive.pike?list=1&msg=200007130827.BAA32671@Rage.Resentment.org XForce ISS Database: webactive-active-log(5184) https://exchange.xforce.ibmcloud.com/vulnerabilities/5184
Copyright	This script is Copyright (C) 2000 Renaud Deraison

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.