Command Shell in Externally Accessible Directory

Opis

A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server.

Skutki

• Confidentiality, Integrity, Availability

  Execute Unauthorized Code or Commands

Zapobieganie

• Installation, System Configuration

  Remove any Shells accessible under the web root folder and children directories.

Słabość nadrzędna

• CWE-552 Files or Directories Accessible to External Parties

Kiedy powstaje

• Implementation
• Operation

Dotyczy

Not Language-Specific, Web Based, Web Server