3093 : Potentially Dangerous Web Document Found
Printer | http://osvdb.org/3093 | Email This | Edit Vulnerability

Views This Week
9

Views All Time
284

Info

Last Modified
8 months ago

Percent Complete
75%

Disclosure
Jan 01, 1994

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 A potentially dangerous file was found on the web server. While there is no known vulnerability or exploit associated with this file, it has been found in logs after web servers have come under attack from unknown sources and software. This may indicate the presence of an undisclosed vulnerability that is being exploited in the wild.

Classification

 Location: Remote/Network Access Required
Attack Type: Information Disclosure, Misconfiguration, Other
Impact: Loss of Confidentiality, Loss of Integrity, Loss of Availability
Exploit: Exploit Unknown
OSVDB: Best Practice

Solution

 If the file or directory contains sensitive information, remove the files from the web server or password protect them. If CGI programs contain exploits, remove the files or correct the vulnerability.

Products
All Vendors
Watch-list
Web Server
Watch-list
 All Versions

References

Tools & Filters

Nikto

 295 1364 1365 1366 1367 1376 2265 2266 2267 2268 2269 2270 2271 2272 2273 2274 2275 2276 2277 2278 2279 2280 2281 2282 2283 2284 2285 2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302 2303 2304 2305 2306 2307 2308 2309 2310 2311 2312 2313 2314 2315 2316 2317 2318 2319 2320 2321 2322 2323 2324 2325 2326 2327 2328 2329 2330 2331 2332 2333 2334 2335 2336 2337 2338 2339 ... and 453 more

Manual Testing Notes

Credit

Unknown or Incomplete

Blogs

Provided by Technorati

 None found at this time

Comments

Add Comment

No Comments.

DONATE NOW!

User Status

Quick Searches

Advertisements

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

© Copyright 2008 Open Source Vulnerability Database (OSVDB), All Rights Reserved.
Privacy Statement - Terms of Use