ID de Prueba:	1.3.6.1.4.1.25623.1.0.56896
Categoría:	CGI abuses
Título:	CherryPy StaticFilter Directory Traversal
Resumen:	NOSUMMARY
Descripción:	Description: The remote system is powered by CherryPy which according to its version number is vulnreable to a directory traversal attack as a result of insufficient filtering of requests that pass through the 'staticFilter' module. Attackers can as a result view arbitrary files on tthe system. Versions prior to 2.1.1 are vulnerable. Solution: Upgrade to version 2.1.1 or later. Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	BugTraq ID: 16760 Common Vulnerability Exposure (CVE) ID: CVE-2006-0847 http://www.securityfocus.com/bid/16760 http://www.gentoo.org/security/en/glsa/glsa-200605-16.xml http://secunia.com/advisories/18944 http://secunia.com/advisories/20344 http://www.vupen.com/english/advisories/2006/0677 XForce ISS Database: cherrypy-staticfilter-directory-traversal(24809) https://exchange.xforce.ibmcloud.com/vulnerabilities/24809
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.