PT-2015-5666 · Netcat · Netcat

Jing Wang · Publicado 2015-03-05 · Atualizado 2016-12-03 · CVE-2015-2214

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetCat versions 5.01 and earlier

Description The issue allows remote attackers to obtain the installation path. This is achieved via the redirect url parameter to "netshop/post.php" API endpoint.

Recommendations For NetCat versions 5.01 and earlier, avoid using the redirect url parameter in the "netshop/post.php" API endpoint until the issue is resolved.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-2214

Produtos afetados

Netcat

Referências · 5

• http://packetstormsecurity.com/files/130583/NetCat-CMS-5.01-3.12-Full-Path-Disclosure.html · Nota
• http://seclists.org/fulldisclosure/2015/Mar/8 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2214 · Nota de Segurança
• http://tetraph.com/security/full-path-disclosure-vulnerability/netcat-cms-full-path-disclosure-information-disclosure-security-vulnerabilities · Nota
• http://securityfocus.com/bid/72854 · Nota