NCDSA HTTPd nph-test-cgi Arbitrary Directory Listing

Medium Nessus Plugin ID 10165

Synopsis

The remote web server contains a CGI script that is affected by information disclosure vulnerabilities.

Description

The remote web server contains the 'nph-test-cgi' test script, which is included by default with some web servers.

The version of this script on the remote host fails to quote input to several environment variables, such as 'QUERY_STRING', before echoing it back as part of a shell script. An unauthenticated attacker can leverage this issue to list the contents of directories on the remote host, subject to the permissions of the web server user id.

Solution

Disable or delete the CGI script.

Plugin Details

Severity: Medium

ID: 10165

File Name: nph-test-cgi.nasl

Version: 1.31

Type: remote

Family: CGI abuses

Published: 1999/06/22

Updated: 2018/06/13

Dependencies: 10107

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Vulnerability Information

Vulnerability Publication Date: 1997/02/18

Reference Information

CVE: CVE-1999-0045

BID: 686

CERT-CC: CA-1997-07