Lucene search

[email protected]CVE-2001-1087

HistoryJul 05, 2001 - 4:00 a.m.

CVE-2001-1087

2001-07-0504:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

netcache

config.http.tunnel.allow_ports

remote attack

cve-2001-1087

nvd

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.5%

JSON

The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.

CPENameOperatorVersion
network_appliance:netcachenetwork appliance netcacheeqc700
network_appliance:netcachenetwork appliance netcacheeqc3100
network_appliance:netcachenetwork appliance netcacheeqc6100
network_appliance:netcachenetwork appliance netcacheeqc1100

CPE	Name	Operator	Version
network_appliance:netcache	network appliance netcache	eq	c700
network_appliance:netcache	network appliance netcache	eq	c3100
network_appliance:netcache	network appliance netcache	eq	c6100
network_appliance:netcache	network appliance netcache	eq	c1100

References

www.securityfocus.com/archive/1/195176

www.securityfocus.com/bid/2990

exchange.xforce.ibmcloud.com/vulnerabilities/6807

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.5%

JSON