Deskripsi CVE

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.

Informasi CVE

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Informasi eksploitasi

Exploit Database EDB-ID : 38741

Tanggal publikasi : 2013-08-05 22h00 +00:00
Penulis : Piotr Duszynski
Terverifikasi EDB : Yes

Produk yang Disebutkan

Konfigurasi 0

Nmap>>Nmap >> Version Hingga (termasuk) 6.25

Nmap>>Nmap >> Version 2.1

Nmap>>Nmap >> Version 2.2

Nmap>>Nmap >> Version 2.3

Nmap>>Nmap >> Version 2.05

Nmap>>Nmap >> Version 2.06

Nmap>>Nmap >> Version 2.07

Nmap>>Nmap >> Version 2.08

Nmap>>Nmap >> Version 2.09

Nmap>>Nmap >> Version 2.10

Nmap>>Nmap >> Version 2.11

Nmap>>Nmap >> Version 2.12

Nmap>>Nmap >> Version 2.50

Nmap>>Nmap >> Version 2.51

Nmap>>Nmap >> Version 2.52

Nmap>>Nmap >> Version 2.53

Nmap>>Nmap >> Version 2.54

Nmap>>Nmap >> Version 2.99

Nmap>>Nmap >> Version 3.00

Nmap>>Nmap >> Version 3.10

Nmap>>Nmap >> Version 3.15

Nmap>>Nmap >> Version 3.20

Nmap>>Nmap >> Version 3.25

Nmap>>Nmap >> Version 3.26

Nmap>>Nmap >> Version 3.27

Nmap>>Nmap >> Version 3.28

Nmap>>Nmap >> Version 3.30

Nmap>>Nmap >> Version 3.40

Nmap>>Nmap >> Version 3.45

Nmap>>Nmap >> Version 3.48

Nmap>>Nmap >> Version 3.50

Nmap>>Nmap >> Version 3.55

Nmap>>Nmap >> Version 3.70

Nmap>>Nmap >> Version 3.75

Nmap>>Nmap >> Version 3.81

Nmap>>Nmap >> Version 3.90

Nmap>>Nmap >> Version 3.91

Nmap>>Nmap >> Version 3.93

Nmap>>Nmap >> Version 3.94

Nmap>>Nmap >> Version 3.95

Nmap>>Nmap >> Version 3.96

Nmap>>Nmap >> Version 3.98

Nmap>>Nmap >> Version 3.99

Nmap>>Nmap >> Version 3.999

Nmap>>Nmap >> Version 3.9999

Nmap>>Nmap >> Version 4.00

Nmap>>Nmap >> Version 4.01

Nmap>>Nmap >> Version 4.02

Nmap>>Nmap >> Version 4.03

Nmap>>Nmap >> Version 4.04

Nmap>>Nmap >> Version 4.10

Nmap>>Nmap >> Version 4.11

Nmap>>Nmap >> Version 4.20

Nmap>>Nmap >> Version 4.21

Nmap>>Nmap >> Version 4.22

Nmap>>Nmap >> Version 4.49

Nmap>>Nmap >> Version 4.50

Nmap>>Nmap >> Version 4.51

Nmap>>Nmap >> Version 4.52

Nmap>>Nmap >> Version 4.53

Nmap>>Nmap >> Version 4.60

Nmap>>Nmap >> Version 4.62

Nmap>>Nmap >> Version 4.65

Nmap>>Nmap >> Version 4.68

Nmap>>Nmap >> Version 4.75

Nmap>>Nmap >> Version 4.76

Nmap>>Nmap >> Version 4.85

Nmap>>Nmap >> Version 4.90

Nmap>>Nmap >> Version 5.00

Nmap>>Nmap >> Version 5.10

Nmap>>Nmap >> Version 5.20

Nmap>>Nmap >> Version 5.21

Nmap>>Nmap >> Version 5.30

Nmap>>Nmap >> Version 5.35

Nmap>>Nmap >> Version 5.50

Nmap>>Nmap >> Version 5.51

Nmap>>Nmap >> Version 5.59

Nmap>>Nmap >> Version 5.61

Nmap>>Nmap >> Version 6.00

Nmap>>Nmap >> Version 6.01

Nmap>>Nmap >> Version 6.20

Konfigurasi 0

Opensuse>>Opensuse >> Version 12.3

Referensi

https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt
Tags : x_refsource_MISC

http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html
Tags : vendor-advisory, x_refsource_SUSE

http://packetstormsecurity.com/files/122719/TWSL2013-025.txt
Tags : x_refsource_MISC

http://nmap.org/changelog.html
Tags : x_refsource_CONFIRM

https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3
Tags : x_refsource_MISC

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	9.26%	–	–
2022-04-03	–	–	9.26%	–	–
2022-04-10	–	–	8.6%	–	–
2022-06-19	–	–	8.6%	–	–
2023-03-12	–	–	–	3.09%	–
2023-03-26	–	–	–	3.09%	–
2023-04-02	–	–	–	3.09%	–
2024-02-11	–	–	–	3.09%	–
2024-06-02	–	–	–	3.25%	–
2024-09-15	–	–	–	3.27%	–
2024-11-03	–	–	–	3.27%	–
2024-11-24	–	–	–	2.97%	–
2024-12-22	–	–	–	4.15%	–
2025-01-19	–	–	–	3.31%	–
2025-01-19	–	–	–	3.31%	–
2025-03-18	–	–	–	–	6.89%
2025-03-30	–	–	–	–	6.89%
2025-04-06	–	–	–	–	6.89%
2025-06-11	–	–	–	–	6.43%
2025-11-18	–	–	–	–	6.43%
2025-11-21	–	–	–	–	6.43%

Tanggal	Persentil
2022-02-06	87%
2022-04-03	94%
2022-04-10	93%
2022-06-19	94%
2023-03-12	9%
2023-03-26	89%
2023-04-02	9%
2024-02-11	91%
2024-06-02	91%
2024-09-15	91%
2024-11-03	92%
2024-11-24	91%
2024-12-22	92%
2025-01-19	91%
2025-01-19	91%
2025-03-18	91%
2025-03-30	9%
2025-04-06	91%
2025-06-11	91%
2025-11-18	9%
2025-11-21	91%

CVE-2013-4885 : Detail

CVE-2013-4885

Deskripsi CVE

Informasi CVE

Metrik

EPSS

Skor EPSS

Persentil EPSS

Informasi eksploitasi

Exploit Database EDB-ID : 38741

Produk yang Disebutkan

Konfigurasi 0

Konfigurasi 0

Referensi