PT-2015-5666 · Netcat · Netcat

Jing Wang · Published 2015-03-05 · Updated 2016-12-03 · CVE-2015-2214

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetCat versions 5.01 and earlier

Description The issue allows remote attackers to obtain the installation path. This is achieved via the redirect url parameter to "netshop/post.php" API endpoint.

Recommendations For NetCat versions 5.01 and earlier, avoid using the redirect url parameter in the "netshop/post.php" API endpoint until the issue is resolved.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-2214

Affected Products

Netcat

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2214 · Security Note
• http://packetstormsecurity.com/files/130583/NetCat-CMS-5.01-3.12-Full-Path-Disclosure.html · Note
• http://seclists.org/fulldisclosure/2015/Mar/8 · Note
• http://tetraph.com/security/full-path-disclosure-vulnerability/netcat-cms-full-path-disclosure-information-disclosure-security-vulnerabilities · Note
• http://securityfocus.com/bid/72854 · Note