4.3
CVE-2013-1841
- EPSS 1.94%
- Veröffentlicht 13.06.2014 14:55:11
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginNet-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Seamons ≫ Net-server Version-
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.94% | 0.775 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://www.openwall.com/lists/oss-security/2013/03/04/10
http://www.openwall.com/lists/oss-security/2013/03/12/2
http://www.securityfocus.com/bid/58309
https://bugzilla.redhat.com/show_bug.cgi?id=920683
https://exchange.xforce.ibmcloud.com/vulnerabilities/82900