Web服务CGI安全漏洞分析与检测  

The analysis of security holes in interface of web servers and its detection

作　　者：孙百勇[1] 向剑伟[1] 莫正坤[1] 陈晓苏[1] 

机构地区：[1]华中科技大学计算机科学与技术学院

出　　处：《华中科技大学学报（自然科学版）》2003年第3期66-68,共3页Journal of Huazhong University of Science and Technology(Natural Science Edition)

摘　　要：CGI安全漏洞的存在对Web服务器形成了许多潜在的威胁 .基于CGI的工作原理 ,从漏洞成因的角度对CGI的安全漏洞进行了分类 .发现CGI漏洞的有效方法是通过安全漏洞检测 ,而漏洞扫描则是漏洞检测最常用的方法 .在对campas漏洞深入分析的基础上 ,给出了一种基于远端网络扫描原理的模拟攻击方法 .先确定campas文件的存在性 ,然后根据发出的特殊请求及返回结果来分析是否存在漏洞 ,提出了几种修补漏洞的措施及预防漏洞的建议 .实验表明 。Based on working logic of CGI, the CGI security holes were categorized according to their causes. Research showed CGI holes can be found through security holes checking and the most common technique in security holes checking was security holes scanning. Through deep analysis on 'CAMPAS' hole, a method of simulation attack based on remote network scanning was advocated. Based on it, the existence of the 'CAMPAS' file was located and whether there were holes or not through the feedback of a special request was determined. Experiments showed that the method was accurate in locating the existence of 'CAMPAS' holes. Some precautions and remedies were recommended.

关 键 词：公共网关接口 安全漏洞 漏洞库 模拟攻击 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]