CVEvulnerability
CVE-2013-1841
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.
Affected configurations
• seamons net-server
Related
Weakness · not in database (1)
References
- http://www.openwall.com/lists/oss-security/2013/03/04/10 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/03/12/2 www.openwall.com
- http://www.securityfocus.com/bid/58309 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=920683 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82900 exchange.xforce.ibmcloud.com
- http://www.openwall.com/lists/oss-security/2013/03/04/10 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/03/12/2 www.openwall.com
- http://www.securityfocus.com/bid/58309 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=920683 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82900 exchange.xforce.ibmcloud.com