anadmin
-------

CVE Number: 
CVE-1999-0947 

Details:
The following cgi script(s) was found on the system:

  /ssi/envout.bat
  {CGI directory}/test.bat
  {CGI directory}/input.bat
  {CGI directory}/input2.bat

These are AN-HTTPdversion 1.20b test CGI scripts that allow an attacker to
execute commands on the server.  They are not needed for any functionality.

Fix:
It is recommended that the file(s) be removed from the system, or that the
vendor be contacted to ensure the latest version is being used.

Related URLs:
http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-11-01&msg=381EE9AC140.6668SHADOWPENGUIN@fox.nightland.net
http://www.st.rim.or.jp/~nakata/ (in Japanese)

$Id: anadmin,v 1.1 2000/11/06 15:34:05 loveless Exp $
