NVD

Id
40393  
Name
CVE-2013-4885  
Description
The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-26  
Modified Date
2013-11-30  
Seq
2013-4885  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205083 40393 CVE-2013-4885 openSUSE-SU-2013:1561  View
205084 40393 CVE-2013-4885 openSUSE-SU-2013:1579  View
205085 40393 CVE-2013-4885 http://nmap.org/changelog.html  View
205086 40393 CVE-2013-4885 http://packetstormsecurity.com/files/122719/TWSL2013-025.txt  View
205087 40393 CVE-2013-4885 https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3  View
205088 40393 CVE-2013-4885 https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23334 JVNDB-2013-004909 NMap の http-domino-enum-passwords.nse スクリプトにおける任意の名前のファイルをアップロードされる脆弱性 NMap の http-domino-enum-passwords.nse スクリプトには、domino-enum-passwords.idpath が設定されている場合、任意の名前のファイルをアップロードされる脆弱性が存在します。 CVE-2013-4885 64827 CVE-2013-4885 40393 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004909.html 2013-07-29 2014-08-11 View