Lucent VitalNet VsSetCookie.exe Direct Request Authentication Bypass

Binary data 1715.prm...

Lucent VitalNet VsSetCookie.exe Unauthorized Access

The VsSetCookie.exe CGI exists on the remote web server. Some versions of this file have an unauthorized access vulnerability. Making a request similar to : http://www.example.com/cgi-bin/VsSetCookie.exe?vsuser= will result in full access if a valid username is provided. Please note Nessus solely...