Test Kennung:	1.3.6.1.4.1.25623.1.0.802704
Kategorie:	Web Servers
Titel:	Netmechanica NetDecision Traffic Grapher Server Information Disclosure Vulnerability
Zusammenfassung:	NetDecision Traffic Grapher Server is prone to an information disclosure vulnerability.
Beschreibung:	Summary: NetDecision Traffic Grapher Server is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to an improper validation of malicious HTTP GET request to 'default.nd' with invalid HTTP version number followed by multiple 'CRLF', which discloses the source code of 'default.nd'. Vulnerability Impact: Successful exploitation will allow attackers to gain sensitive information. Affected Software/OS: NetDecision Traffic Grapher Server version 4.5.1 Solution: Upgrade to Traffic Grapher Server 4.6.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1466 BugTraq ID: 52196 http://www.securityfocus.com/bid/52196 http://www.exploit-db.com/exploits/18542 http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Traffic_Grapher_Server_SourceCode_Disc_Vuln.txt http://secpod.org/blog/?p=481 http://osvdb.org/79652 http://secunia.com/advisories/48168 XForce ISS Database: netdecision-traffic-nd-source-disclosure(73531) https://exchange.xforce.ibmcloud.com/vulnerabilities/73531
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.