Matt, There is a good sized list of shell interpreters, and cgis which will cause this check to flag the target as vulnerable. There also could be some machine configurations that may generate a false positive, depending on which web server you are running, and how it is configured.
Your log file should state which file was found in the cgi directory, this may give you something to go on, since it might not be an obvious file such as sh, ksh, bash, etc. If you'd like to open a ticket with support please do, we can take a look at the log files, and get more information on the server in question. Thanks, Ben Layer ISS X-Force -----Original Message----- From: Peaslee, Matt [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 3:56 PM To: '[EMAIL PROTECTED]' Subject: [ISSForum] SGI vulncgi problem All, I am running an SGI machine that has version 6.5 O/S. I am getting the vulnsgi vulnerability on the system, but there do not appear to be any shell interpreters in the cgi-bin. Anybody else have something similar to this? Thanks Matt _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
