CVE-2002-1484

Опубликовано: 22 апр. 2003

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-09/0201.html
Broken Link
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0125.html
Broken Link
Vendor Advisory
http://www.iss.net/security_center/static/10136.php
Broken Link
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/5725
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-09/0201.html
Broken Link
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0125.html
Broken Link
Vendor Advisory
http://www.iss.net/security_center/static/10136.php
Broken Link
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/5725
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:siemens:db4web:3.4:*:*:*:*:*:*:*

cpe:2.3:a:siemens:db4web:3.6:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.0703

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-918

Связанные уязвимости

GHSA-fc65-58v2-9r8h