guestbook.nasl

漏洞扫描源码,可以扫描linux,windows,交换机路由器

#
# This script was written by Mathieu Perrin <[e-mail]>
#
# See the Nessus Scripts License for details
#

if(description)
{
 script_id(10098);
 script_bugtraq_id(776);
 script_version ("$Revision: 38 $");
 script_cve_id("CVE-1999-0237"); 
 name["english"] = "guestbook.cgi";
 name["francais"] = "guestbook.cgi";
 script_name(english:name["english"], francais:name["francais"]);

 desc["english"] = "The 'guestbook.cgi' is installed. This CGI has
 a well known security flaw that lets anyone execute arbitrary
 commands with the privileges of the http daemon (root or nobody).

Solution :  remove it from /cgi-bin.

Risk factor : High";

desc["francais"] = "Le cgi 'guestbook.cgi' est install