 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2013-4701 |
| Description: | Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.866866 1.3.6.1.4.1.25623.1.0.866865 1.3.6.1.4.1.25623.1.1.10.2013.0272 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2013-4701 http://jvn.jp/en/jp/JVN24713981/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2013-000080 SuSE Security Announcement: openSUSE-SU-2016:2025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html SuSE Security Announcement: openSUSE-SU-2016:2114 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-08/msg00083.html |