CGI abuses : WebSTAR Statistical information disclosure

Anfälligkeitssuche		Suche in 219043 CVE Beschreibungen und 99761 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.55625

Kategorie: CGI abuses

Titel: WebSTAR Statistical information disclosure

Zusammenfassung: NOSUMMARY

Beschreibung: Description:

The server appears to be a WebSTAR server responding to
URL requests containing the string M_A_C_H_T_T_P_V_E_R_S_I_O_N
This gives out sensitive information regarding the configuration
of the system, how busy it is, and how long it has been running.

In addition, these requests do not show up in any logs, allowing
an attacker to use this for denial of service requests.

Solution: Upgrade to a later version.
http://mail-archives.apache.org/mod_mbox/httpd-dev/199607.mbox/%3C199607132341.SAA06955@sierra.zyzzyva.com%3E

Risk factor : Medium

Copyright Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.55625
Kategorie:	CGI abuses
Titel:	WebSTAR Statistical information disclosure
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The server appears to be a WebSTAR server responding to URL requests containing the string M_A_C_H_T_T_P_V_E_R_S_I_O_N This gives out sensitive information regarding the configuration of the system, how busy it is, and how long it has been running. In addition, these requests do not show up in any logs, allowing an attacker to use this for denial of service requests. Solution: Upgrade to a later version. http://mail-archives.apache.org/mod_mbox/httpd-dev/199607.mbox/%3C199607132341.SAA06955@sierra.zyzzyva.com%3E Risk factor : Medium
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com