HTTP: Dumpenv.pl Probe
This signature detects access to the dumpenv.pl CGI script. Attackers can access sensitive Web server configuration information.
Extended Description
If an attacker can execute the dumpenv.pl script distributed with some versions of the Sambar Server, sensitive information may be obtained about the server's configuration that may be used to support further penetration of the targeted host.
Short Name
HTTP:CGI:PERL:DUMPENV-PROBE
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-1999-1178 Dumpenv.pl Probe
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
CVSS Score
5.0