?? 2328.txt
字號(hào):
Rule:--Sid:2328--Summary:This event is generated when an attempt is made to access theauthentication_index.php script which contains known vulnerabilities andis part of the phpGedView CGI web application running on a server.--Impact:Information gathering and system integrity compromise. Possible unauthorizedadministrative access to the server or application. Possible executionof arbitrary code of the attackers choosing in some cases.--Detailed Information:This event is generated when an attempt is made to exploit a known vulnerability in the phpGedView CGI web application running on a server.Multiple vulnerabilities exist in the application which can lead to theexecution of arbitrary code of the atttackers choosing.--Affected Systems: phpGedView--Attack Scenarios:An attacker can supply code of their choice by including a file inparamters supplied to the script.--Ease of Attack:Simple. No exploit software required.--False Positives:None known.--False Negatives:None known.--Corrective Action:Ensure the system is using an up to date version of the software and hashad all vendor supplied patches applied.--Contributors:Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--
?? 快捷鍵說明
復(fù)制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號(hào)
Ctrl + =
減小字號(hào)
Ctrl + -