Lucene search

K
nvd[email protected]NVD:CVE-2013-1841
HistoryJun 13, 2014 - 2:55 p.m.

CVE-2013-1841

2014-06-1314:55:11
CWE-264
web.nvd.nist.gov
3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.011

Percentile

84.6%

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.

Affected configurations

Nvd
Node
seamonsnet-serverMatch-
VendorProductVersionCPE
seamonsnet-server-cpe:2.3:a:seamons:net-server:-:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.011

Percentile

84.6%