6.8

CVE-2013-4885

Exploit
The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nmap ≫ Nmap Version <= 6.25
Nmap ≫ Nmap Version 2.1 Update beta1
Nmap ≫ Nmap Version 2.2 Update beta2
Nmap ≫ Nmap Version 2.2 Update beta3
Nmap ≫ Nmap Version 2.2 Update beta4
Nmap ≫ Nmap Version 2.3 Update beta10
Nmap ≫ Nmap Version 2.3 Update beta12
Nmap ≫ Nmap Version 2.3 Update beta13
Nmap ≫ Nmap Version 2.3 Update beta14
Nmap ≫ Nmap Version 2.3 Update beta17
Nmap ≫ Nmap Version 2.3 Update beta18
Nmap ≫ Nmap Version 2.3 Update beta19
Nmap ≫ Nmap Version 2.3 Update beta20
Nmap ≫ Nmap Version 2.3 Update beta21
Nmap ≫ Nmap Version 2.3 Update beta4
Nmap ≫ Nmap Version 2.3 Update beta5
Nmap ≫ Nmap Version 2.3 Update beta6
Nmap ≫ Nmap Version 2.3 Update beta8
Nmap ≫ Nmap Version 2.3 Update beta9
Nmap ≫ Nmap Version 2.05
Nmap ≫ Nmap Version 2.06
Nmap ≫ Nmap Version 2.07
Nmap ≫ Nmap Version 2.08
Nmap ≫ Nmap Version 2.09
Nmap ≫ Nmap Version 2.10
Nmap ≫ Nmap Version 2.11
Nmap ≫ Nmap Version 2.12
Nmap ≫ Nmap Version 2.50
Nmap ≫ Nmap Version 2.51
Nmap ≫ Nmap Version 2.52
Nmap ≫ Nmap Version 2.53
Nmap ≫ Nmap Version 2.54 Update beta1
Nmap ≫ Nmap Version 2.54 Update beta16
Nmap ≫ Nmap Version 2.54 Update beta19
Nmap ≫ Nmap Version 2.54 Update beta2
Nmap ≫ Nmap Version 2.54 Update beta20
Nmap ≫ Nmap Version 2.54 Update beta21
Nmap ≫ Nmap Version 2.54 Update beta22
Nmap ≫ Nmap Version 2.54 Update beta24
Nmap ≫ Nmap Version 2.54 Update beta25
Nmap ≫ Nmap Version 2.54 Update beta26
Nmap ≫ Nmap Version 2.54 Update beta27
Nmap ≫ Nmap Version 2.54 Update beta28
Nmap ≫ Nmap Version 2.54 Update beta29
Nmap ≫ Nmap Version 2.54 Update beta3
Nmap ≫ Nmap Version 2.54 Update beta30
Nmap ≫ Nmap Version 2.54 Update beta31
Nmap ≫ Nmap Version 2.54 Update beta32
Nmap ≫ Nmap Version 2.54 Update beta33
Nmap ≫ Nmap Version 2.54 Update beta34
Nmap ≫ Nmap Version 2.54 Update beta35
Nmap ≫ Nmap Version 2.54 Update beta36
Nmap ≫ Nmap Version 2.54 Update beta37
Nmap ≫ Nmap Version 2.54 Update beta4
Nmap ≫ Nmap Version 2.54 Update beta5
Nmap ≫ Nmap Version 2.54 Update beta6
Nmap ≫ Nmap Version 2.54 Update beta7
Nmap ≫ Nmap Version 2.99 Update rc1
Nmap ≫ Nmap Version 2.99 Update rc2
Nmap ≫ Nmap Version 3.00
Nmap ≫ Nmap Version 3.10 Update alpha1
Nmap ≫ Nmap Version 3.10 Update alpha2
Nmap ≫ Nmap Version 3.10 Update alpha3
Nmap ≫ Nmap Version 3.10 Update alpha4
Nmap ≫ Nmap Version 3.10 Update alpha5
Nmap ≫ Nmap Version 3.10 Update alpha7
Nmap ≫ Nmap Version 3.10 Update alpha9
Nmap ≫ Nmap Version 3.15 Update beta1
Nmap ≫ Nmap Version 3.15 Update beta2
Nmap ≫ Nmap Version 3.15 Update beta3
Nmap ≫ Nmap Version 3.20
Nmap ≫ Nmap Version 3.25
Nmap ≫ Nmap Version 3.26
Nmap ≫ Nmap Version 3.27
Nmap ≫ Nmap Version 3.28
Nmap ≫ Nmap Version 3.30
Nmap ≫ Nmap Version 3.40 Update pvt1
Nmap ≫ Nmap Version 3.40 Update pvt10
Nmap ≫ Nmap Version 3.40 Update pvt11
Nmap ≫ Nmap Version 3.40 Update pvt12
Nmap ≫ Nmap Version 3.40 Update pvt13
Nmap ≫ Nmap Version 3.40 Update pvt14
Nmap ≫ Nmap Version 3.40 Update pvt15
Nmap ≫ Nmap Version 3.40 Update pvt16
Nmap ≫ Nmap Version 3.40 Update pvt17
Nmap ≫ Nmap Version 3.40 Update pvt2
Nmap ≫ Nmap Version 3.40 Update pvt3
Nmap ≫ Nmap Version 3.40 Update pvt4
Nmap ≫ Nmap Version 3.40 Update pvt6
Nmap ≫ Nmap Version 3.40 Update pvt7
Nmap ≫ Nmap Version 3.40 Update pvt8
Nmap ≫ Nmap Version 3.40 Update pvt9
Nmap ≫ Nmap Version 3.45
Nmap ≫ Nmap Version 3.48
Nmap ≫ Nmap Version 3.50
Nmap ≫ Nmap Version 3.55
Nmap ≫ Nmap Version 3.70
Nmap ≫ Nmap Version 3.75
Nmap ≫ Nmap Version 3.81
Nmap ≫ Nmap Version 3.90
Nmap ≫ Nmap Version 3.91
Nmap ≫ Nmap Version 3.93
Nmap ≫ Nmap Version 3.94 Update alpha1
Nmap ≫ Nmap Version 3.94 Update alpha2
Nmap ≫ Nmap Version 3.94 Update alpha3
Nmap ≫ Nmap Version 3.95
Nmap ≫ Nmap Version 3.96 Update beta1
Nmap ≫ Nmap Version 3.98 Update beta1
Nmap ≫ Nmap Version 3.99
Nmap ≫ Nmap Version 3.999
Nmap ≫ Nmap Version 3.9999
Nmap ≫ Nmap Version 4.00
Nmap ≫ Nmap Version 4.01
Nmap ≫ Nmap Version 4.02 Update alpha1
Nmap ≫ Nmap Version 4.02 Update alpha2
Nmap ≫ Nmap Version 4.03
Nmap ≫ Nmap Version 4.04 Update beta1
Nmap ≫ Nmap Version 4.10
Nmap ≫ Nmap Version 4.11
Nmap ≫ Nmap Version 4.20
Nmap ≫ Nmap Version 4.20 Update alpha1
Nmap ≫ Nmap Version 4.20 Update alpha10
Nmap ≫ Nmap Version 4.20 Update alpha11
Nmap ≫ Nmap Version 4.20 Update alpha2
Nmap ≫ Nmap Version 4.20 Update alpha3
Nmap ≫ Nmap Version 4.20 Update alpha4
Nmap ≫ Nmap Version 4.20 Update alpha5
Nmap ≫ Nmap Version 4.20 Update alpha6
Nmap ≫ Nmap Version 4.20 Update alpha7
Nmap ≫ Nmap Version 4.20 Update alpha8
Nmap ≫ Nmap Version 4.20 Update alpha9
Nmap ≫ Nmap Version 4.20 Update rc1
Nmap ≫ Nmap Version 4.20 Update rc2
Nmap ≫ Nmap Version 4.21 Update alpha1
Nmap ≫ Nmap Version 4.21 Update alpha2
Nmap ≫ Nmap Version 4.21 Update alpha3
Nmap ≫ Nmap Version 4.21 Update alpha4
Nmap ≫ Nmap Version 4.22 Update soc1
Nmap ≫ Nmap Version 4.22 Update soc2
Nmap ≫ Nmap Version 4.22 Update soc3
Nmap ≫ Nmap Version 4.22 Update soc5
Nmap ≫ Nmap Version 4.22 Update soc6
Nmap ≫ Nmap Version 4.22 Update soc7
Nmap ≫ Nmap Version 4.22 Update soc8
Nmap ≫ Nmap Version 4.49 Update rc1
Nmap ≫ Nmap Version 4.49 Update rc2
Nmap ≫ Nmap Version 4.49 Update rc3
Nmap ≫ Nmap Version 4.49 Update rc4
Nmap ≫ Nmap Version 4.49 Update rc5
Nmap ≫ Nmap Version 4.49 Update rc6
Nmap ≫ Nmap Version 4.49 Update rc7
Nmap ≫ Nmap Version 4.50
Nmap ≫ Nmap Version 4.51 Update beta
Nmap ≫ Nmap Version 4.52
Nmap ≫ Nmap Version 4.53
Nmap ≫ Nmap Version 4.60
Nmap ≫ Nmap Version 4.62
Nmap ≫ Nmap Version 4.65
Nmap ≫ Nmap Version 4.68
Nmap ≫ Nmap Version 4.75
Nmap ≫ Nmap Version 4.76
Nmap ≫ Nmap Version 4.85 Update beta1
Nmap ≫ Nmap Version 4.85 Update beta10
Nmap ≫ Nmap Version 4.85 Update beta2
Nmap ≫ Nmap Version 4.85 Update beta3
Nmap ≫ Nmap Version 4.85 Update beta4
Nmap ≫ Nmap Version 4.85 Update beta5
Nmap ≫ Nmap Version 4.85 Update beta6
Nmap ≫ Nmap Version 4.85 Update beta7
Nmap ≫ Nmap Version 4.85 Update beta8
Nmap ≫ Nmap Version 4.85 Update beta9
Nmap ≫ Nmap Version 4.90 Update rc1
Nmap ≫ Nmap Version 5.00
Nmap ≫ Nmap Version 5.10 Update beta1
Nmap ≫ Nmap Version 5.10 Update beta2
Nmap ≫ Nmap Version 5.20
Nmap ≫ Nmap Version 5.21
Nmap ≫ Nmap Version 5.30 Update beta1
Nmap ≫ Nmap Version 5.35 Update dc1
Nmap ≫ Nmap Version 5.50
Nmap ≫ Nmap Version 5.51
Nmap ≫ Nmap Version 5.59 Update beta1
Nmap ≫ Nmap Version 5.61 Update test1
Nmap ≫ Nmap Version 5.61 Update test2
Nmap ≫ Nmap Version 5.61 Update test4
Nmap ≫ Nmap Version 5.61 Update test5
Nmap ≫ Nmap Version 6.00
Nmap ≫ Nmap Version 6.01
Nmap ≫ Nmap Version 6.20 Update beta1
Opensuse ≫ Opensuse Version 12.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.22% 0.935
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html
http://nmap.org/changelog.html
http://packetstormsecurity.com/files/122719/TWSL2013-025.txt
Exploit
https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3
Patch
Exploit
https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt
Exploit