リモートホストは、pythonで書かれたWeb上のCVSリポジトリの閲覧ツールであるViewCVSを実行しています。 

このWebサイトのリモートバージョンに欠陥があるため、攻撃者がリモートインストールに対してクロスサイトスクリプティング攻撃やHTTP応答分割攻撃を実行する可能性があります。

The remote host is running ViewCVS, a tool to browse CVS repositories over the web written in python. 

Flaws in the remote version of this website may allow an attacker to launch cross-site scripting and/or HTTP response-splitting attacks against the remote install.

The remote host is affected by the vulnerability described in GLSA-200412-26 (ViewCVS: Information leak and XSS vulnerabilities)

    The tar export functions in ViewCVS bypass the 'hide_cvsroot' and     'forbidden' settings and therefore expose information that should be     kept secret (CAN-2004-0915). Furthermore, some error messages in     ViewCVS do not filter user-provided information, making it vulnerable     to a cross-site scripting attack (CAN-2004-1062).
  Impact :

    By using the tar export functions, a remote attacker could access     information that is configured as restricted. Through the use of a     malicious request, an attacker could also inject and execute malicious     script code, potentially compromising another user's browser.
  Workaround :

    There is no known workaround at this time.

遠端主機正在執行 ViewCVS，這是一個以 Python 編寫的透過 Web 瀏覽 CVS 存放庫的工具。 

此網站的遠端版本存在瑕疵，可允許攻擊者針對遠端安裝發動跨網站指令碼和/或 HTTP 回應分割攻擊。

The remote host is using the ViewCVS, a tool to browse CVS repositories.
According to its version number, the remote version of this software is vulnerable to multiple unspecified vulnerabilities.

The remote host is running ViewCVS, a tool to browse CVS repositories over the web. There is a flaw in the remote ViewCVS server that may allow an attacker to steal the credentials of third-party users via an HTTP response splitting attack.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
16062	ViewCVS < 1.0.0の複数の脆弱性	Nessus	CGI abuses	2004/12/28	2021/1/19	medium
16062	ViewCVS < 1.0.0 Multiple Vulnerabilities	Nessus	CGI abuses	2004/12/28	2021/1/19	medium
16068	GLSA-200412-26 : ViewCVS: Information leak and XSS vulnerabilities	Nessus	Gentoo Local Security Checks	2004/12/28	2021/1/6	medium
16062	ViewCVS < 1.0.0 多個弱點	Nessus	CGI abuses	2004/12/28	2021/1/19	medium
2446	ViewCVS < 1.0-dev Multiple Unspecified Vulnerabilities	Nessus Network Monitor	CGI	2004/12/6	2019/3/6	high
2478	ViewCVS < 1.0.0 HTTP Response Splitting	Nessus Network Monitor	CGI	2004/12/28	2019/3/6	high

检测

插件搜索

medium

medium

medium

medium

high

high