yabb.nasl

nessus 扫描器 windows版 漏洞扫描

#
# This script was written by Renaud Deraison <[e-mail]>
#
# See the Nessus Scripts License for details
#

if(description)
{
 script_id(10512);
 script_bugtraq_id(1668);
 script_version ("$Revision: 1.18 $");
 script_cve_id("CVE-2000-0853");
 name["english"] = "YaBB";
 name["francais"] = "YaBB";
 script_name(english:name["english"], francais:name["francais"]);
 
 desc["english"] = "The 'YaBB.pl' CGI is installed. This CGI has
a well known security flaw that lets an attacker read arbitrary
files with the privileges of the http daemon (usually root or nobody).

Solution : remove 'YaBB.pl' from /cgi-bin or upgrade to the latest version.

Risk factor : High";


 desc["francais"] = "Le cgi 'YaBB.pl' est install