The remote server is running a version  of 4D  WebStar Web Server earlier than 5.3.3. Such versions are reportedly affected by multiple issues :

  - An attacker may be able to obtain the listing of a     directory by appending a star (*) to the directory name.

  - An attacker may obtain the file php.ini by requesting     /cgi-bin/php.ini.

It is possible that the remote web server contains one or more dangerous CGI scripts. 

Note that this plugin does not actually test for the underlying flaws but instead only searches for scripts with the same name as those with known vulnerabilities.

遠端伺服器正在執行的 4D WebStar Web Server 是 5.3.3 之前版本。據報這些版本受到多個問題的影響：

  - 攻擊者或可在目錄名稱上附加星號 (*)，藉此取得目錄清單。

  - 攻擊者可透過要求 /cgi-bin/php.ini 來取得檔案 php.ini。

远程 Web 服务器可能包含一个或多个危险的 CGI 脚本。 

请注意，此插件并未实际测试潜在缺陷，而是仅搜索与具有已知漏洞的脚本同名的脚本。

远程服务器正在运行的 4D WebStar Web 服务器版本低于 5.3.3。这些版本据报告会受到多种问题的影响：

  - 攻击者可通过在目录名称后附加星号 (*) 来获取目录列表。

  - 攻击者可通过请求 /cgi-bin/php.ini 来获取文件 php.ini。

The remote server is running 4D WebStar Web Server.  The remote server is vulnerable to two issues:  an attacker may be able to obtain the listing of a directory by appending a star (*) to the directory name and an attacker may obtain the file php.ini by directly requesting /cgi-bin/php.ini

ID	名前	製品	ファミリー	公開日	更新日	深刻度
14196	4D WebStar Arbitrary Multiple Vulnerabilities	Nessus	Web Servers	2004/8/3	2018/11/15	medium
11748	Multiple Dangerous CGI Script Detection	Nessus	CGI abuses	2003/6/17	2022/12/7	high
14196	4D Web Star 任意多個弱點	Nessus	Web Servers	2004/8/3	2018/11/15	medium
11748	多个危险 CGI 脚本检测	Nessus	CGI abuses	2003/6/17	2022/12/7	high
14196	4D WebStar 任意多个漏洞	Nessus	Web Servers	2004/8/3	2018/11/15	medium
2171	4D WebStar < 5.3.3 Information Disclosure	Nessus Network Monitor	Web Servers	2004/8/30	2019/3/6	medium

検出

プラグインの検索

medium

high

medium

high

medium

medium