Signature Detail
Short Name |
SCAN:MISC:HTTP:RESPONDER-ACCESS |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
SCAN |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SCAN: Responder.cgi Access
This signature detects access to the responder.cgi script, a common target of vulnerability scans.
Extended Description
'responder.cgi' is a free CGI shell script, written in C, for MacHTTP Server and other MacOS webserver products. It is possible to cause a denial of service to MacHTTP webserver due to improper bounds checking in the script 'responder.cgi'. HTTP GET requests with an excessive number of characters will cause the server to freeze. The webserver will need to be restarted to regain normal functionality.
Affected Products
- John O'Fallon Responder.cgi 1.0.0
References
- BugTraq: 3155
- URL: http://www.msec.net/archives/responder.cgi.html