[AWS] Nessus resports security hole in aws?

Dmitriy Anisimkov anisimkov@omsknet.ru
Wed, 15 Oct 2003 19:21:27 +0700


Preben Randhol wrote:
> I was running the hello_world demo of aws on my machine while checking
> it with nessus. I got this feedback:
> 
>  . Vulnerability found on port unknown (8080/tcp) :
> 

>     It is possible to retrieve the password of the remote guestbook application
>     by requesting the file 'passwd.txt' in files/

It could be just configuration hole of your server, or wrong report.
Could you give me the http log of the server, when the checking was running ?