Language:
https://www.securityfocus.com/bid/100954
Severity: High
ID: 103718
File Name: freebsd_pkg_c0dae63448204505850db1c975d0f67d.nasl
Version: 3.13
Type: local
Family: FreeBSD Local Security Checks
Published: 10/9/2017
Updated: 12/5/2022
Supported Sensors: Nessus
Risk Factor: Critical
Score: 9.2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.5
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CPE: p-cpe:/a:freebsd:freebsd:tomcat, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/6/2017
Vulnerability Publication Date: 10/4/2017
CISA Known Exploited Vulnerability Due Dates: 4/15/2022
Core Impact
Metasploit (Tomcat RCE via JSP Upload Bypass)
Elliot (Apache Tomcat for Windows HTTP PUT Method File Upload)
CVE: CVE-2017-12617