WEB_CGI count.cgi access

 

Code: p902

Severity: Notice

 

Description: This event is generated when an attempt is made to access Wwwcount (count.cgi), a very popular CGI program used to track website usage.

Impact: Will allow access as with the privileges of the user running the process.

Corrective: If you are running version 2.3 of Wwwcount it is suggested you upgrade immediately. In the meantime you may wish to consider removing the execution bit on this program. Versions 2.4 and above of this software are available at: http://www.fccc.edu/users/muquit/Count.html