CVE Vulnerabilities

CVE-2013-4885

Published: Oct 26, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
2.6 LOW
AV:N/AC:H/Au:N/C:N/I:P/A:N
RedHat/V3
Ubuntu
LOW
root.io logo minimus.io logo echo.ai logo

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload arbitrarily named files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.

Affected Software

NameVendorStart VersionEnd Version
NmapNmap*6.25 (including)
NmapNmap2.1-beta1 (including)2.1-beta1 (including)
NmapNmap2.2-beta2 (including)2.2-beta2 (including)
NmapNmap2.2-beta3 (including)2.2-beta3 (including)
NmapNmap2.2-beta4 (including)2.2-beta4 (including)
NmapNmap2.3-beta10 (including)2.3-beta10 (including)
NmapNmap2.3-beta12 (including)2.3-beta12 (including)
NmapNmap2.3-beta13 (including)2.3-beta13 (including)
NmapNmap2.3-beta14 (including)2.3-beta14 (including)
NmapNmap2.3-beta17 (including)2.3-beta17 (including)
NmapNmap2.3-beta18 (including)2.3-beta18 (including)
NmapNmap2.3-beta19 (including)2.3-beta19 (including)
NmapNmap2.3-beta20 (including)2.3-beta20 (including)
NmapNmap2.3-beta21 (including)2.3-beta21 (including)
NmapNmap2.3-beta4 (including)2.3-beta4 (including)
NmapNmap2.3-beta5 (including)2.3-beta5 (including)
NmapNmap2.3-beta6 (including)2.3-beta6 (including)
NmapNmap2.3-beta8 (including)2.3-beta8 (including)
NmapNmap2.3-beta9 (including)2.3-beta9 (including)
NmapNmap2.05 (including)2.05 (including)
NmapNmap2.06 (including)2.06 (including)
NmapNmap2.07 (including)2.07 (including)
NmapNmap2.08 (including)2.08 (including)
NmapNmap2.09 (including)2.09 (including)
NmapNmap2.10 (including)2.10 (including)
NmapNmap2.11 (including)2.11 (including)
NmapNmap2.12 (including)2.12 (including)
NmapNmap2.50 (including)2.50 (including)
NmapNmap2.51 (including)2.51 (including)
NmapNmap2.52 (including)2.52 (including)
NmapNmap2.53 (including)2.53 (including)
NmapNmap2.54-beta1 (including)2.54-beta1 (including)
NmapNmap2.54-beta16 (including)2.54-beta16 (including)
NmapNmap2.54-beta19 (including)2.54-beta19 (including)
NmapNmap2.54-beta2 (including)2.54-beta2 (including)
NmapNmap2.54-beta20 (including)2.54-beta20 (including)
NmapNmap2.54-beta21 (including)2.54-beta21 (including)
NmapNmap2.54-beta22 (including)2.54-beta22 (including)
NmapNmap2.54-beta24 (including)2.54-beta24 (including)
NmapNmap2.54-beta25 (including)2.54-beta25 (including)
NmapNmap2.54-beta26 (including)2.54-beta26 (including)
NmapNmap2.54-beta27 (including)2.54-beta27 (including)
NmapNmap2.54-beta28 (including)2.54-beta28 (including)
NmapNmap2.54-beta29 (including)2.54-beta29 (including)
NmapNmap2.54-beta3 (including)2.54-beta3 (including)
NmapNmap2.54-beta30 (including)2.54-beta30 (including)
NmapNmap2.54-beta31 (including)2.54-beta31 (including)
NmapNmap2.54-beta32 (including)2.54-beta32 (including)
NmapNmap2.54-beta33 (including)2.54-beta33 (including)
NmapNmap2.54-beta34 (including)2.54-beta34 (including)
NmapNmap2.54-beta35 (including)2.54-beta35 (including)
NmapNmap2.54-beta36 (including)2.54-beta36 (including)
NmapNmap2.54-beta37 (including)2.54-beta37 (including)
NmapNmap2.54-beta4 (including)2.54-beta4 (including)
NmapNmap2.54-beta5 (including)2.54-beta5 (including)
NmapNmap2.54-beta6 (including)2.54-beta6 (including)
NmapNmap2.54-beta7 (including)2.54-beta7 (including)
NmapNmap2.99-rc1 (including)2.99-rc1 (including)
NmapNmap2.99-rc2 (including)2.99-rc2 (including)
NmapNmap3.00 (including)3.00 (including)
NmapNmap3.10-alpha1 (including)3.10-alpha1 (including)
NmapNmap3.10-alpha2 (including)3.10-alpha2 (including)
NmapNmap3.10-alpha3 (including)3.10-alpha3 (including)
NmapNmap3.10-alpha4 (including)3.10-alpha4 (including)
NmapNmap3.10-alpha5 (including)3.10-alpha5 (including)
NmapNmap3.10-alpha7 (including)3.10-alpha7 (including)
NmapNmap3.10-alpha9 (including)3.10-alpha9 (including)
NmapNmap3.15-beta1 (including)3.15-beta1 (including)
NmapNmap3.15-beta2 (including)3.15-beta2 (including)
NmapNmap3.15-beta3 (including)3.15-beta3 (including)
NmapNmap3.20 (including)3.20 (including)
NmapNmap3.25 (including)3.25 (including)
NmapNmap3.26 (including)3.26 (including)
NmapNmap3.27 (including)3.27 (including)
NmapNmap3.28 (including)3.28 (including)
NmapNmap3.30 (including)3.30 (including)
NmapNmap3.40-pvt1 (including)3.40-pvt1 (including)
NmapNmap3.40-pvt10 (including)3.40-pvt10 (including)
NmapNmap3.40-pvt11 (including)3.40-pvt11 (including)
NmapNmap3.40-pvt12 (including)3.40-pvt12 (including)
NmapNmap3.40-pvt13 (including)3.40-pvt13 (including)
NmapNmap3.40-pvt14 (including)3.40-pvt14 (including)
NmapNmap3.40-pvt15 (including)3.40-pvt15 (including)
NmapNmap3.40-pvt16 (including)3.40-pvt16 (including)
NmapNmap3.40-pvt17 (including)3.40-pvt17 (including)
NmapNmap3.40-pvt2 (including)3.40-pvt2 (including)
NmapNmap3.40-pvt3 (including)3.40-pvt3 (including)
NmapNmap3.40-pvt4 (including)3.40-pvt4 (including)
NmapNmap3.40-pvt6 (including)3.40-pvt6 (including)
NmapNmap3.40-pvt7 (including)3.40-pvt7 (including)
NmapNmap3.40-pvt8 (including)3.40-pvt8 (including)
NmapNmap3.40-pvt9 (including)3.40-pvt9 (including)
NmapNmap3.45 (including)3.45 (including)
NmapNmap3.48 (including)3.48 (including)
NmapNmap3.50 (including)3.50 (including)
NmapNmap3.55 (including)3.55 (including)
NmapNmap3.70 (including)3.70 (including)
NmapNmap3.75 (including)3.75 (including)
NmapNmap3.81 (including)3.81 (including)
NmapNmap3.90 (including)3.90 (including)
NmapNmap3.91 (including)3.91 (including)
NmapNmap3.93 (including)3.93 (including)
NmapNmap3.94-alpha1 (including)3.94-alpha1 (including)
NmapNmap3.94-alpha2 (including)3.94-alpha2 (including)
NmapNmap3.94-alpha3 (including)3.94-alpha3 (including)
NmapNmap3.95 (including)3.95 (including)
NmapNmap3.96-beta1 (including)3.96-beta1 (including)
NmapNmap3.98-beta1 (including)3.98-beta1 (including)
NmapNmap3.99 (including)3.99 (including)
NmapNmap3.999 (including)3.999 (including)
NmapNmap3.9999 (including)3.9999 (including)
NmapNmap4.00 (including)4.00 (including)
NmapNmap4.01 (including)4.01 (including)
NmapNmap4.02-alpha1 (including)4.02-alpha1 (including)
NmapNmap4.02-alpha2 (including)4.02-alpha2 (including)
NmapNmap4.03 (including)4.03 (including)
NmapNmap4.04-beta1 (including)4.04-beta1 (including)
NmapNmap4.10 (including)4.10 (including)
NmapNmap4.11 (including)4.11 (including)
NmapNmap4.20 (including)4.20 (including)
NmapNmap4.20-alpha1 (including)4.20-alpha1 (including)
NmapNmap4.20-alpha10 (including)4.20-alpha10 (including)
NmapNmap4.20-alpha11 (including)4.20-alpha11 (including)
NmapNmap4.20-alpha2 (including)4.20-alpha2 (including)
NmapNmap4.20-alpha3 (including)4.20-alpha3 (including)
NmapNmap4.20-alpha4 (including)4.20-alpha4 (including)
NmapNmap4.20-alpha5 (including)4.20-alpha5 (including)
NmapNmap4.20-alpha6 (including)4.20-alpha6 (including)
NmapNmap4.20-alpha7 (including)4.20-alpha7 (including)
NmapNmap4.20-alpha8 (including)4.20-alpha8 (including)
NmapNmap4.20-alpha9 (including)4.20-alpha9 (including)
NmapNmap4.20-rc1 (including)4.20-rc1 (including)
NmapNmap4.20-rc2 (including)4.20-rc2 (including)
NmapNmap4.21-alpha1 (including)4.21-alpha1 (including)
NmapNmap4.21-alpha2 (including)4.21-alpha2 (including)
NmapNmap4.21-alpha3 (including)4.21-alpha3 (including)
NmapNmap4.21-alpha4 (including)4.21-alpha4 (including)
NmapNmap4.22-soc1 (including)4.22-soc1 (including)
NmapNmap4.22-soc2 (including)4.22-soc2 (including)
NmapNmap4.22-soc3 (including)4.22-soc3 (including)
NmapNmap4.22-soc5 (including)4.22-soc5 (including)
NmapNmap4.22-soc6 (including)4.22-soc6 (including)
NmapNmap4.22-soc7 (including)4.22-soc7 (including)
NmapNmap4.22-soc8 (including)4.22-soc8 (including)
NmapNmap4.49-rc1 (including)4.49-rc1 (including)
NmapNmap4.49-rc2 (including)4.49-rc2 (including)
NmapNmap4.49-rc3 (including)4.49-rc3 (including)
NmapNmap4.49-rc4 (including)4.49-rc4 (including)
NmapNmap4.49-rc5 (including)4.49-rc5 (including)
NmapNmap4.49-rc6 (including)4.49-rc6 (including)
NmapNmap4.49-rc7 (including)4.49-rc7 (including)
NmapNmap4.50 (including)4.50 (including)
NmapNmap4.51-beta (including)4.51-beta (including)
NmapNmap4.52 (including)4.52 (including)
NmapNmap4.53 (including)4.53 (including)
NmapNmap4.60 (including)4.60 (including)
NmapNmap4.62 (including)4.62 (including)
NmapNmap4.65 (including)4.65 (including)
NmapNmap4.68 (including)4.68 (including)
NmapNmap4.75 (including)4.75 (including)
NmapNmap4.76 (including)4.76 (including)
NmapNmap4.85-beta1 (including)4.85-beta1 (including)
NmapNmap4.85-beta10 (including)4.85-beta10 (including)
NmapNmap4.85-beta2 (including)4.85-beta2 (including)
NmapNmap4.85-beta3 (including)4.85-beta3 (including)
NmapNmap4.85-beta4 (including)4.85-beta4 (including)
NmapNmap4.85-beta5 (including)4.85-beta5 (including)
NmapNmap4.85-beta6 (including)4.85-beta6 (including)
NmapNmap4.85-beta7 (including)4.85-beta7 (including)
NmapNmap4.85-beta8 (including)4.85-beta8 (including)
NmapNmap4.85-beta9 (including)4.85-beta9 (including)
NmapNmap4.90-rc1 (including)4.90-rc1 (including)
NmapNmap5.00 (including)5.00 (including)
NmapNmap5.10-beta1 (including)5.10-beta1 (including)
NmapNmap5.10-beta2 (including)5.10-beta2 (including)
NmapNmap5.20 (including)5.20 (including)
NmapNmap5.21 (including)5.21 (including)
NmapNmap5.30-beta1 (including)5.30-beta1 (including)
NmapNmap5.35-dc1 (including)5.35-dc1 (including)
NmapNmap5.50 (including)5.50 (including)
NmapNmap5.51 (including)5.51 (including)
NmapNmap5.59-beta1 (including)5.59-beta1 (including)
NmapNmap5.61-test1 (including)5.61-test1 (including)
NmapNmap5.61-test2 (including)5.61-test2 (including)
NmapNmap5.61-test4 (including)5.61-test4 (including)
NmapNmap5.61-test5 (including)5.61-test5 (including)
NmapNmap6.00 (including)6.00 (including)
NmapNmap6.01 (including)6.01 (including)
NmapNmap6.20-beta1 (including)6.20-beta1 (including)
NmapUbuntudevel*
NmapUbuntuesm-infra-legacy/trusty*
NmapUbuntulucid*
NmapUbuntuquantal*
NmapUbunturaring*
NmapUbuntusaucy*
NmapUbuntutrusty*
NmapUbuntutrusty/esm*
NmapUbuntuupstream*

References