Lucene search

K
cveRedhatCVE-2013-1841
HistoryJun 13, 2014 - 2:55 p.m.

CVE-2013-1841

2014-06-1314:55:11
CWE-264
redhat
web.nvd.nist.gov
34
net-server
security
acl bypass
hostname parameter
cve-2013-1841

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.011

Percentile

84.6%

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.

Affected configurations

Nvd
Node
seamonsnet-serverMatch-
VendorProductVersionCPE
seamonsnet-server-cpe:2.3:a:seamons:net-server:-:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.011

Percentile

84.6%