SCAN: alibaba.pl access

This signature detects attempts to access alibaba.pl, a PERL script with multiple vulnerabilities.

Extended Description

There are several CGI programs that ship with the Alibaba webserver. Many of these do not do proper input handling, and therefore will allow requests for access to files outside of normal or safe webserver practice. This results in various situations where an attacker can view, overwrite, create and delete files anywhere on the server.

Affected Products

Computer_software_manufaktur alibaba

Short Name
SCAN:MISC:HTTP:ALIBABA
Severity
Info
Recommended
False
Recommended Action
None
Category
SCAN
Keywords
CVE-1999-0885 access alibaba.pl bid:770
Release Date
12/08/2004
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Rarely
Vendors

Computer_software_manufaktur

CVSS Score

3.6

Found a potential security threat?