CVE 描述

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.

CVE 資訊

指標

指標	評分	嚴重程度	CVSS 向量	來源
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS 是一種預測漏洞被利用可能性的評分模型。

EPSS 評分

EPSS 模型產生介於 0 到 1（0% 到 100%）之間的概率分數。分數越高，漏洞被利用的概率越大。

EPSS 百分位數

百分位數用於根據 EPSS 分數對 CVE 進行排名。例如，EPSS 評分在第 95 百分位的 CVE 比 95% 的其他 CVE 更有可能被利用。因此，百分位數用於比較某 CVE 的 EPSS 分數與其他 CVE 的相對位置。

EPSS First.org

漏洞利用資訊

Exploit Database EDB-ID : 38741

發布日期 : 2013-08-05 22h00 +00:00
作者 : Piotr Duszynski
EDB 已驗證 : Yes

相關產品

設定 0

Nmap>>Nmap >> Version 至（含） 6.25

Nmap>>Nmap >> Version 2.1

Nmap>>Nmap >> Version 2.2

Nmap>>Nmap >> Version 2.3

Nmap>>Nmap >> Version 2.05

Nmap>>Nmap >> Version 2.06

Nmap>>Nmap >> Version 2.07

Nmap>>Nmap >> Version 2.08

Nmap>>Nmap >> Version 2.09

Nmap>>Nmap >> Version 2.10

Nmap>>Nmap >> Version 2.11

Nmap>>Nmap >> Version 2.12

Nmap>>Nmap >> Version 2.50

Nmap>>Nmap >> Version 2.51

Nmap>>Nmap >> Version 2.52

Nmap>>Nmap >> Version 2.53

Nmap>>Nmap >> Version 2.54

Nmap>>Nmap >> Version 2.99

Nmap>>Nmap >> Version 3.00

Nmap>>Nmap >> Version 3.10

Nmap>>Nmap >> Version 3.15

Nmap>>Nmap >> Version 3.20

Nmap>>Nmap >> Version 3.25

Nmap>>Nmap >> Version 3.26

Nmap>>Nmap >> Version 3.27

Nmap>>Nmap >> Version 3.28

Nmap>>Nmap >> Version 3.30

Nmap>>Nmap >> Version 3.40

Nmap>>Nmap >> Version 3.45

Nmap>>Nmap >> Version 3.48

Nmap>>Nmap >> Version 3.50

Nmap>>Nmap >> Version 3.55

Nmap>>Nmap >> Version 3.70

Nmap>>Nmap >> Version 3.75

Nmap>>Nmap >> Version 3.81

Nmap>>Nmap >> Version 3.90

Nmap>>Nmap >> Version 3.91

Nmap>>Nmap >> Version 3.93

Nmap>>Nmap >> Version 3.94

Nmap>>Nmap >> Version 3.95

Nmap>>Nmap >> Version 3.96

Nmap>>Nmap >> Version 3.98

Nmap>>Nmap >> Version 3.99

Nmap>>Nmap >> Version 3.999

Nmap>>Nmap >> Version 3.9999

Nmap>>Nmap >> Version 4.00

Nmap>>Nmap >> Version 4.01

Nmap>>Nmap >> Version 4.02

Nmap>>Nmap >> Version 4.03

Nmap>>Nmap >> Version 4.04

Nmap>>Nmap >> Version 4.10

Nmap>>Nmap >> Version 4.11

Nmap>>Nmap >> Version 4.20

Nmap>>Nmap >> Version 4.21

Nmap>>Nmap >> Version 4.22

Nmap>>Nmap >> Version 4.49

Nmap>>Nmap >> Version 4.50

Nmap>>Nmap >> Version 4.51

Nmap>>Nmap >> Version 4.52

Nmap>>Nmap >> Version 4.53

Nmap>>Nmap >> Version 4.60

Nmap>>Nmap >> Version 4.62

Nmap>>Nmap >> Version 4.65

Nmap>>Nmap >> Version 4.68

Nmap>>Nmap >> Version 4.75

Nmap>>Nmap >> Version 4.76

Nmap>>Nmap >> Version 4.85

Nmap>>Nmap >> Version 4.90

Nmap>>Nmap >> Version 5.00

Nmap>>Nmap >> Version 5.10

Nmap>>Nmap >> Version 5.20

Nmap>>Nmap >> Version 5.21

Nmap>>Nmap >> Version 5.30

Nmap>>Nmap >> Version 5.35

Nmap>>Nmap >> Version 5.50

Nmap>>Nmap >> Version 5.51

Nmap>>Nmap >> Version 5.59

Nmap>>Nmap >> Version 5.61

Nmap>>Nmap >> Version 6.00

Nmap>>Nmap >> Version 6.01

Nmap>>Nmap >> Version 6.20

設定 0

Opensuse>>Opensuse >> Version 12.3

參考資料

https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt
Tags : x_refsource_MISC

http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html
Tags : vendor-advisory, x_refsource_SUSE

http://packetstormsecurity.com/files/122719/TWSL2013-025.txt
Tags : x_refsource_MISC

http://nmap.org/changelog.html
Tags : x_refsource_CONFIRM

https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3
Tags : x_refsource_MISC

日期	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	9.26%	–	–
2022-04-03	–	–	9.26%	–	–
2022-04-10	–	–	8.6%	–	–
2022-06-19	–	–	8.6%	–	–
2023-03-12	–	–	–	3.09%	–
2023-03-26	–	–	–	3.09%	–
2023-04-02	–	–	–	3.09%	–
2024-02-11	–	–	–	3.09%	–
2024-06-02	–	–	–	3.25%	–
2024-09-15	–	–	–	3.27%	–
2024-11-03	–	–	–	3.27%	–
2024-11-24	–	–	–	2.97%	–
2024-12-22	–	–	–	4.15%	–
2025-01-19	–	–	–	3.31%	–
2025-01-19	–	–	–	3.31%	–
2025-03-18	–	–	–	–	6.89%
2025-03-30	–	–	–	–	6.89%
2025-04-06	–	–	–	–	6.89%
2025-06-11	–	–	–	–	6.43%
2025-11-18	–	–	–	–	6.43%
2025-11-21	–	–	–	–	6.43%

日期	百分位
2022-02-06	87%
2022-04-03	94%
2022-04-10	93%
2022-06-19	94%
2023-03-12	9%
2023-03-26	89%
2023-04-02	9%
2024-02-11	91%
2024-06-02	91%
2024-09-15	91%
2024-11-03	92%
2024-11-24	91%
2024-12-22	92%
2025-01-19	91%
2025-01-19	91%
2025-03-18	91%
2025-03-30	9%
2025-04-06	91%
2025-06-11	91%
2025-11-18	9%
2025-11-21	91%

CVE-2013-4885：詳細資料

CVE-2013-4885

CVE 描述

CVE 資訊

指標

EPSS

EPSS 評分

EPSS 百分位數

漏洞利用資訊

Exploit Database EDB-ID : 38741

相關產品

設定 0

設定 0

參考資料