The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.

The remote server is running 4D WebStar Web Server.  The remote server is vulnerable to two issues:  an attacker may be able to obtain the listing of a directory by appending a star (*) to the directory name and an attacker may obtain the file php.ini by directly requesting /cgi-bin/php.ini

The remote server is running a version  of 4D  WebStar Web Server earlier than 5.3.3. Such versions are reportedly affected by multiple issues :

  - An attacker may be able to obtain the listing of a     directory by appending a star (*) to the directory name.

  - An attacker may obtain the file php.ini by requesting     /cgi-bin/php.ini.

It is possible that the remote web server contains one or more dangerous CGI scripts. 

Note that this plugin does not actually test for the underlying flaws but instead only searches for scripts with the same name as those with known vulnerabilities.

ID	Name	Product	Family	Type	Severity
2171	4D WebStar < 5.3.3 Information Disclosure	Nessus Network Monitor	Web Servers		medium
14196	4D WebStar Arbitrary Multiple Vulnerabilities	Nessus	Web Servers	Remote	medium
11748	Multiple Dangerous CGI Script Detection	Nessus	CGI abuses	Remote	high

Detections

Analytics

CVE-2004-0696

medium

Tenable Plugins

medium

medium

high