Lucene search
+L

Sambar CGIs path disclosure

🗓️ 03 Nov 2005 00:00:00Reported by Copyright (C) 2005 Michel ArboiType 
openvas
 openvas
🔗 plugins.openvas.org👁 32 Views

Sambar CGIs path disclosure script with potential path exposur

Related
Refs
Code
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2003-1284
22 Nov 200502:00
cve
cvelist
Cvelist
CVE-2003-1284
22 Nov 200502:00
cvelist
euvd
EUVD
EUVD-2003-1274
7 Oct 202500:30
euvd
nvd
NVD
CVE-2003-1284
31 Dec 200305:00
nvd
openvas
OpenVAS
Sambar Information Disclosure (CVE-2003-1284) - Active Check
24 Oct 200800:00
openvas
openvas
OpenVAS
Sambar XSS Vulnerability - Active Check
24 Oct 200800:00
openvas
nessus
Tenable Nessus
Sambar Server Multiple CGI Environment Variable Disclosure
25 Jun 200300:00
nessus
# SPDX-FileCopyrightText: 2005 Michel Arboi
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.11775");
  script_version("2025-01-17T15:39:18+0000");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/7207");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/7208");
  script_cve_id("CVE-2003-1284");
  script_tag(name:"last_modification", value:"2025-01-17 15:39:18 +0000 (Fri, 17 Jan 2025)");
  script_tag(name:"creation_date", value:"2005-11-03 14:08:04 +0100 (Thu, 03 Nov 2005)");
  script_tag(name:"cvss_base", value:"5.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:N/A:N");
  script_name("Sambar CGIs path disclosure");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2005 Michel Arboi");
  script_family("Web application abuses");

  script_tag(name:"affected", value:"Sambar WebServer v5.3 and below.");

  script_tag(name:"solution", value:"Remove them.");

  script_tag(name:"summary", value:"environ.pl or testcgi.exe is installed. Those CGIs
  reveal the installation directory and some other information
  that could help an attacker.

  This VT has been deprecated and replaced by the VT 'Sambar default CGI info disclosure'
  (OID: 1.3.6.1.4.1.25623.1.0.80082).");

  script_tag(name:"solution_type", value:"Mitigation");
  script_tag(name:"qod_type", value:"remote_vul");

  script_tag(name:"deprecated", value:TRUE);

  exit(0);
}

exit( 66 );

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jan 2025 00:00Current
6.6Medium risk
Vulners AI Score6.6
CVSS 25
EPSS0.01388
32