Signature Detail
Short Name |
SCAN:MISC:HTTP:MAILLIST-PROBE |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
SCAN |
Keywords |
Maillist.pl Probe |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SCAN: Maillist.pl Probe
This signature detects access to the maillist.pl CGI script, a common target of vulnerability scanners.
Extended Description
nph-maillist is a Perl CGI script that handles mailing lists, typically used to notify interested users of site updates. A hostile user can enter commands embedded in an email address via the subscription form, and then force a mailing which will execute the commands.
Affected Products
- Matt Tourtillott nph-maillist 3.0.0
- Matt Tourtillott nph-maillist 3.5.0
References
- BugTraq: 2563
- CVE: CVE-2001-0400