JVN Info.

Id
7483  
Name
JVNDB-2015-002803  
Title
HP Access Control ソフトウェアの Secure Pull Print および Security Pull Print コンポーネントにおける重要な情報を取得される脆弱性  
Summary
HP Access Control (AC) ソフトウェアの Secure Pull Print および Security Pull Print コンポーネントには、重要な情報を取得される脆弱性が存在します。  
Nvdinfo
CVE-2015-2118  
Cvssv2
4  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002803.html  
Published Date
2015-05-19  
Registered Date
2015-05-28  
Last Updated Date
2015-05-28  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
54744 tokyu_7_tokyu_G_20170116.csv 7483 52610 CVE-2011-0411 4 Medium 112.78.212.229 tcp 110 POP3 Service STLS Plaintext Command Injection The remote mail service allows plaintext command injection while negotiating an encrypted communications channel. The remote POP3 service contains a software flaw in its STLS implementation that could allow a remote, unauthenticated attacker to inject commands during the plaintext protocol phase that will be executed during the ciphertext protocol phase. Successful exploitation could allow an attacker to steal a victim"s email or associated SASL (Simple Authentication and Security Layer) credentials. Contact the vendor to see if an update is available. http://tools.ietf.org/html/rfc2487 http://www.securityfocus.com/archive/1/516901/30/0/threaded Nessus sent the following two commands in a single packet : STLS/r/nCAPA/r/n And the server sent the following two responses : +OK Begin SSL/TLS negotiation now. +OK Here"s what I can do: