CGI abuses : BLOG:CMS Origin Spoofing Vulnerability

Anfälligkeitssuche		Suche in 324607 CVE Beschreibungen und 145615 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.56987

Kategorie: CGI abuses

Titel: BLOG:CMS Origin Spoofing Vulnerability

Zusammenfassung: NOSUMMARY

Beschreibung: Description:

The remote version of Blog:CMS, according to its version
number, trusts the content of X_FORWARDED_FOR in HTTP
headers. Attackers can set this field and thus hide their
origins providing requests.

Versions prior to 4.0.0e are known to be vulnerable.

Solution : Upgrade to 4.0.0e or later.

Risk factor : Medium

CVSS Score:
5.0

Querverweis: BugTraq ID: 15326
Common Vulnerability Exposure (CVE) ID: CVE-2005-4687
http://www.securityfocus.com/bid/15326
http://secunia.com/advisories/17425
http://secunia.com/advisories/17433

Copyright Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.56987
Kategorie:	CGI abuses
Titel:	BLOG:CMS Origin Spoofing Vulnerability
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote version of Blog:CMS, according to its version number, trusts the content of X_FORWARDED_FOR in HTTP headers. Attackers can set this field and thus hide their origins providing requests. Versions prior to 4.0.0e are known to be vulnerable. Solution : Upgrade to 4.0.0e or later. Risk factor : Medium CVSS Score: 5.0
Querverweis:	BugTraq ID: 15326 Common Vulnerability Exposure (CVE) ID: CVE-2005-4687 http://www.securityfocus.com/bid/15326 http://secunia.com/advisories/17425 http://secunia.com/advisories/17433
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com