Summary
The CWMail.exe exists on this webserver.
Some versions of this file are vulnerable to remote exploit.
An attacker may make use of this file to gain access to confidential data or escalate their privileges on the Web server.
Solution
remove it from the cgi-bin or scripts directory.
Patch information: http://marc.theaimsgroup.com/?l=bugtraq&m=101362100602008&w=2
Severity
Classification
-
CVE CVE-2002-0273 -
CVSS Base Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Apache Tomcat TroubleShooter Servlet Installed
- Apache Tomcat Cross-Site Scripting and Security Bypass Vulnerabilities
- Apache ActiveMQ 'admin/queueBrowse' Cross Site Scripting Vulnerability
- Advanced Image Hosting Cross Site Scripting Vulnerability
- Adobe BlazeDS XML and XML External Entity Injection Vulnerabilities