Test ID:	1.3.6.1.4.1.25623.1.0.56896
Category:	CGI abuses
Title:	CherryPy StaticFilter Directory Traversal
Summary:	NOSUMMARY
Description:	Description: The remote system is powered by CherryPy which according to its version number is vulnreable to a directory traversal attack as a result of insufficient filtering of requests that pass through the 'staticFilter' module. Attackers can as a result view arbitrary files on tthe system. Versions prior to 2.1.1 are vulnerable. Solution: Upgrade to version 2.1.1 or later. Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	BugTraq ID: 16760 Common Vulnerability Exposure (CVE) ID: CVE-2006-0847 http://www.securityfocus.com/bid/16760 http://www.gentoo.org/security/en/glsa/glsa-200605-16.xml http://secunia.com/advisories/18944 http://secunia.com/advisories/20344 http://www.vupen.com/english/advisories/2006/0677 XForce ISS Database: cherrypy-staticfilter-directory-traversal(24809) https://exchange.xforce.ibmcloud.com/vulnerabilities/24809
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.