?? 2484.txt
字號:
Rule:--Sid:2484--Summary:This event is generated when a remote user attempts to access source.jspon a Tomcat web server. This may indicate an attempt to exploit adirectory traversal vulnerability.--Impact:Information gathering.--Detailed Information:This event may indicate an attempt to exploit a vulnerability in thesource.jsp script. An attacker can use directory traversal techniqueswhen accessing source.jsp to view hidden files and directories on theweb server with the access privileges of the server. --Affected Systems: Apache Tomcat on Novell Netware 6.0--Attack Scenarios:An attacker can use directory traversal techniques when executingsource.jsp to view directories and files on the web server.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade to the latest non-affected version of the software.--Contributors:Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -