CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

PT-2016-3903

Name of the Vulnerable Software and Affected Versions Shell In A Box versions prior to 2.19 Description The issue makes it easier for remote attackers to conduct DNS rebinding attacks. This is due to the HTTPS fallback implementation in the affected software. The attack can be conducted via the...

CVE-2015-8400: Undefined Security Weakness

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

[SECURITY] Fedora 22 Update: shellinabox-2.19-1.fc22

Shell In A Box implements a web server that can export arbitrary command li ne tools to a web based terminal emulator. This emulator is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugins...

[SECURITY] Fedora 23 Update: shellinabox-2.19-1.fc23

Shell In A Box implements a web server that can export arbitrary command li ne tools to a web based terminal emulator. This emulator is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugins...