| VID |
21037 |
| Severity |
20 |
| Port |
80, ... |
| Protocol |
TCP |
| Class |
CGI |
| Detailed Description |
The "dumpenv" CGI is installed in the web server. This CGI gives away too much infomation the web server configuration, which will help a cracker. |
| Recommendation |
Remove the dumpenv file from the /cgi-bin directory |
| Related URL |
CVE-1999-1178 (CVE) |
| Related URL |
(SecurityFocus) |
| Related URL |
3223 (ISS) |
|