CVE-2013-1841

Description

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/82900

https://bugzilla.redhat.com/show_bug.cgi?id=920683

http://www.securityfocus.com/bid/58309

http://www.openwall.com/lists/oss-security/2013/03/12/2

http://www.openwall.com/lists/oss-security/2013/03/04/10

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3