Signature Detail

HTTP: Unix File /etc/passwd Probe

This signature detects attempts to access the main password file. If the server does not use shadowed passwords, attackers can compromise user passwords through brute force or add themselves to the system.

Extended Description

Successful exploitation of the vulnerability could enable a remote attacker to gain a user list to be used in a brute force attack.

References

• CVE: CVE-2014-5115
• CVE: CVE-2010-1711
• URL: https://www.exploit-db.com/exploits/15913
• URL: https://www.exploit-db.com/exploits/14647
• URL: https://www.exploit-db.com/exploits/12260