Short Name |
HTTP:INFO-LEAK:F-SECURE-MANAGER |
---|---|
Severity |
Warning |
Recommended |
No |
Category |
HTTP |
Keywords |
F-Secure Policy Manager information disclosure |
Release Date |
2005/03/10 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects attempts to obtain information about an F-Secure Policy Manager installation. The web server managing the policy allows unauthenticated users to retrieve information about the software installation.
F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the vulnerable software will return an error message that includes the installation path of the software.