This host is installed with Python and is prone to Information Disclosure vulnerability.

Successful exploitation could allow attackers to gain access to potentially sensitive information contained in arbitrary scripts by requesting cgi script without / in the beginnig of URL.

Apply the patch from below link, http://svn.python.org/view?view=revision&revision=71303 ***** NOTE: Ignore this warning if above mentioned patch is already applied. *****

The flaw is due to an error when handling 'is_cgi' method in 'CGIHTTPServer.py' in the 'CGIHTTPServer module', which allows an attcker to supply a specially crafted request without the leading '/' character to the CGIHTTPServer.

Python version 2.5, 2.6, and 3.0

• http://bugs.python.org/issue2254
• http://hg.python.org/cpython/rev/c6c4398293bd/
• http://securitytracker.com/id?1025489

---

Updated on 2015-03-25