NetProwler 3.5.1 Security Update 11

November 19, 2001
NetProwler 3.5.1 Security Update 11

Description

NetProwler 3.5.1 SU11 strengthens 6 signatures already packaged with previous security updates and adds a RPC service targeted buffer overflow. This update addresses a number of false positive issues that have been reported to Symantec. You may obtain NetProwler 3.5.1 SU11 through the product's auto update feature.

Security Update 11 Signatures

ASP_Download

If URLs are preceded by the hex value of ".", some IIS versions will allow potentially sensitive Active Server Pages (.asp) to be downloaded by the client rather than executed by the server.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0253

BAT_Execution_Via_HTTP

Offering batch files via HTTP can be an attempt to execute commands on the client system. A download of a batch file could also be an attempt to learn more about the server's configuration.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0233

Convert_CGI

Some versions of the Convert CGI program allow remote users to execute commands on the web server using the privileges of the web server process.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0175

Glimpse_CGI

Some versions of the Glimpse CGI program allow remote users to execute commands on the web server using the privileges of the web server process.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0147

Rpc_Yppasswd_Buffer_Overflow

Detects buffer overflow attempts for yppasswd service in Solaris 2.5.1, 2.6, 7 and 8.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=2001-0779

View_Source_CGI

The view-source CGI script (included in SCO Skunkware and other web servers) allows remote users to view any file under the web root directory.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0174

Wrap_CGI

Some versions of the IRIX wrap CGI program allow remote users to list files and execute commands on the web server using the privileges of the web server process.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0149

Last modified on: Tuesday, 11-Jun-02 18:51:22