Описание
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| shellinabox | fixed | 2.19 | package | |
| shellinabox | no-dsa | jessie | package | |
| shellinabox | no-dsa | wheezy | package |
Примечания
https://www.openwall.com/lists/oss-security/2015/12/02/6
Связанные уязвимости
CVSS3: 7.4
ubuntu
больше 10 лет назад
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
CVSS3: 7.4
nvd
больше 10 лет назад
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
CVSS3: 7.4
github
больше 4 лет назад
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.