ID de Prueba:	1.3.6.1.4.1.25623.1.0.10711
Categoría:	Web application abuses
Título:	Sambar pagecount Vulnerability - Active Check
Resumen:	By default, there is a pagecount script with Sambar Web Server; located at http://sambarserver/session/pagecount.;; This counter writes its temporary files in c:\sambardirectory\tmp. It allows to overwrite any; files on the filesystem since the 'page' parameter is not checked against '../../' attacks.
Descripción:	Summary: By default, there is a pagecount script with Sambar Web Server located at http://sambarserver/session/pagecount. This counter writes its temporary files in c:\sambardirectory\tmp. It allows to overwrite any files on the filesystem since the 'page' parameter is not checked against '../../' attacks. Solution: Remove this script. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2001-1010 BugTraq ID: 3092 http://www.securityfocus.com/bid/3092 Bugtraq: 20010721 Sambar Web Server pagecount exploit code (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-07/0565.html XForce ISS Database: sambar-pagecount-overwrite-files(6916) https://exchange.xforce.ibmcloud.com/vulnerabilities/6916
Copyright	Copyright (C) 2001 Vincent Renardias & Copyright (C) 2001 StrongHoldNet

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.