Test ID:	1.3.6.1.4.1.25623.1.0.140459
Category:	Databases
Title:	Redis Cross Protocol Scripting Vulnerability
Summary:	networking.c in Redis allows 'Cross Protocol Scripting' because it lacks a;check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack;triggers an HTTP request to the Redis TCP port).
Description:	Summary: networking.c in Redis allows 'Cross Protocol Scripting' because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port). Affected Software/OS: Redis 3.2.6 and prior. Solution: Update to version 3.2.7 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10517 BugTraq ID: 101572 http://www.securityfocus.com/bid/101572 https://github.com/antirez/redis/commit/874804da0c014a7d704b3d285aa500098a931f50 https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES https://www.reddit.com/r/redis/comments/5r8wxn/redis_327_is_out_important_security_fixes_inside/
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.