1. Home
  2. Discussions
  3. GIAC
  4. Security Administration
  5. GCIH Discussions
  6. GCIH Exam Topic 7 Question 62 Discussion

GIAC Certified Incident Handler GCIH Question # 62 Topic 7 Discussion

 GIAC Discussions      Browse All Questions      Go to Exam Detail      Get Premium Access
 Previous
Next  

GIAC Certified Incident Handler GCIH Question # 62 Topic 7 Discussion

GCIH Exam Topic 7 Question 62 Discussion:
Question #: 62
Topic #: 7

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The output of the scanning test is as follows:

C:\whisker.pl -h target_IP_address

-- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - =

= Host: target_IP_address

= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1

mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22

+ 200 OK: HEAD /cgi-bin/printenv

John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server. Which of the following statements about 'Printenv' vulnerability are true?

Each correct answer represents a complete solution. Choose all that apply.
A.

This vulnerability helps in a cross site scripting attack.

B.

'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the attacker.

C.

The countermeasure to 'printenv' vulnerability is to remove the CGI script.

D.

With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other malicious scripts.

Get Premium GCIH Questions
Actual exam question for GIAC GCIH exam by Rael74114 at Aug 3, 2025, 12:00:00 AM

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.

Submit
 Previous
Next