APP: SuperScout Web Reports Server User Database Access
This signature detects attempts to exploit a known vulnerability in the Webfilter for SuperScout Web Reports Server running on Microsoft Windows 2000 and NT. Attackers can use a simple GET request to obtain the user database (a txt file that contains user names and encrypted passwords) from the server.
Extended Description
SurfControl SuperScout WebFilter is web filtering software for Microsoft Windows operating systems. SurfControl SuperScout WebFilter includes a remotely accessible reporting service. It has been reported that SuperScout WebFilter insecurely stores some types of information. The reports server included as part of the SuperScout WebFilter package stores sensitive information in a publicly accessible, unrestricted directory. A remote user could gain access to user credentials.
Affected Products
Surfcontrol superscout_web_filter_for_windows_nt/2000
Short Name
APP:SUPERSCOUT-USERDB
Severity
Minor
Recommended
False
Recommended Action
None
Category
APP
Keywords
Access CVE-2002-0705 Database Reports Server SuperScout User Web bid:5856
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
Port
TCP/8888
False Positive
Unknown
Vendors
Surfcontrol
CVSS Score
7.5