Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-4885

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.

Published

2013-10-26T17:55:03.387

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	nmap	nmap	≤ 6.25	Yes
Application	nmap	nmap	2.1	Yes
Application	nmap	nmap	2.2	Yes
Application	nmap	nmap	2.2	Yes
Application	nmap	nmap	2.2	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.3	Yes
Application	nmap	nmap	2.05	Yes
Application	nmap	nmap	2.06	Yes
Application	nmap	nmap	2.07	Yes
Application	nmap	nmap	2.08	Yes
Application	nmap	nmap	2.09	Yes
Application	nmap	nmap	2.10	Yes
Application	nmap	nmap	2.11	Yes
Application	nmap	nmap	2.12	Yes
Application	nmap	nmap	2.50	Yes
Application	nmap	nmap	2.51	Yes
Application	nmap	nmap	2.52	Yes
Application	nmap	nmap	2.53	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.54	Yes
Application	nmap	nmap	2.99	Yes
Application	nmap	nmap	2.99	Yes
Application	nmap	nmap	3.00	Yes
Application	nmap	nmap	3.10	Yes
Application	nmap	nmap	3.10	Yes
Application	nmap	nmap	3.10	Yes
Application	nmap	nmap	3.10	Yes
Application	nmap	nmap	3.10	Yes
Application	nmap	nmap	3.10	Yes
Application	nmap	nmap	3.10	Yes
Application	nmap	nmap	3.15	Yes
Application	nmap	nmap	3.15	Yes
Application	nmap	nmap	3.15	Yes
Application	nmap	nmap	3.20	Yes
Application	nmap	nmap	3.25	Yes
Application	nmap	nmap	3.26	Yes
Application	nmap	nmap	3.27	Yes
Application	nmap	nmap	3.28	Yes
Application	nmap	nmap	3.30	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.40	Yes
Application	nmap	nmap	3.45	Yes
Application	nmap	nmap	3.48	Yes
Application	nmap	nmap	3.50	Yes
Application	nmap	nmap	3.55	Yes
Application	nmap	nmap	3.70	Yes
Application	nmap	nmap	3.75	Yes
Application	nmap	nmap	3.81	Yes
Application	nmap	nmap	3.90	Yes
Application	nmap	nmap	3.91	Yes
Application	nmap	nmap	3.93	Yes
Application	nmap	nmap	3.94	Yes
Application	nmap	nmap	3.94	Yes
Application	nmap	nmap	3.94	Yes
Application	nmap	nmap	3.95	Yes
Application	nmap	nmap	3.96	Yes
Application	nmap	nmap	3.98	Yes
Application	nmap	nmap	3.99	Yes
Application	nmap	nmap	3.999	Yes
Application	nmap	nmap	3.9999	Yes
Application	nmap	nmap	4.00	Yes
Application	nmap	nmap	4.01	Yes
Application	nmap	nmap	4.02	Yes
Application	nmap	nmap	4.02	Yes
Application	nmap	nmap	4.03	Yes
Application	nmap	nmap	4.04	Yes
Application	nmap	nmap	4.10	Yes
Application	nmap	nmap	4.11	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.20	Yes
Application	nmap	nmap	4.21	Yes
Application	nmap	nmap	4.21	Yes
Application	nmap	nmap	4.21	Yes
Application	nmap	nmap	4.21	Yes
Application	nmap	nmap	4.22	Yes
Application	nmap	nmap	4.22	Yes
Application	nmap	nmap	4.22	Yes
Application	nmap	nmap	4.22	Yes
Application	nmap	nmap	4.22	Yes
Application	nmap	nmap	4.22	Yes
Application	nmap	nmap	4.22	Yes
Application	nmap	nmap	4.49	Yes
Application	nmap	nmap	4.49	Yes
Application	nmap	nmap	4.49	Yes
Application	nmap	nmap	4.49	Yes
Application	nmap	nmap	4.49	Yes
Application	nmap	nmap	4.49	Yes
Application	nmap	nmap	4.49	Yes
Application	nmap	nmap	4.50	Yes
Application	nmap	nmap	4.51	Yes
Application	nmap	nmap	4.52	Yes
Application	nmap	nmap	4.53	Yes
Application	nmap	nmap	4.60	Yes
Application	nmap	nmap	4.62	Yes
Application	nmap	nmap	4.65	Yes
Application	nmap	nmap	4.68	Yes
Application	nmap	nmap	4.75	Yes
Application	nmap	nmap	4.76	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.85	Yes
Application	nmap	nmap	4.90	Yes
Application	nmap	nmap	5.00	Yes
Application	nmap	nmap	5.10	Yes
Application	nmap	nmap	5.10	Yes
Application	nmap	nmap	5.20	Yes
Application	nmap	nmap	5.21	Yes
Application	nmap	nmap	5.30	Yes
Application	nmap	nmap	5.35	Yes
Application	nmap	nmap	5.50	Yes
Application	nmap	nmap	5.51	Yes
Application	nmap	nmap	5.59	Yes
Application	nmap	nmap	5.61	Yes
Application	nmap	nmap	5.61	Yes
Application	nmap	nmap	5.61	Yes
Application	nmap	nmap	5.61	Yes
Application	nmap	nmap	6.00	Yes
Application	nmap	nmap	6.01	Yes
Application	nmap	nmap	6.20	Yes
Operating System	opensuse	opensuse	12.3	Yes

References

http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html Vendor Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html ([email protected])
http://nmap.org/changelog.html ([email protected])
http://packetstormsecurity.com/files/122719/TWSL2013-025.txt Exploit ([email protected])
https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3 Exploit, Patch ([email protected])
https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt Exploit ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html (af854a3a-2127-422b-91ae-364da2661108)
http://nmap.org/changelog.html (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/122719/TWSL2013-025.txt Exploit (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3 Exploit, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt Exploit (af854a3a-2127-422b-91ae-364da2661108)