Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-1841
HistoryJun 13, 2014 - 2:55 p.m.

CVE-2013-1841

2014-06-1314:55:11
Debian Security Bug Tracker
security-tracker.debian.org
8

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.011

Percentile

84.6%

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.011

Percentile

84.6%