Detections
Analytics
Revive Adserver < 3.1.0 Multiple Vulnerabilities
medium Nessus Network Monitor Plugin ID 8607
Synopsis
The remote host running Revive Adserver is prone to multiple vulnerabilities because it is hosting an outdated version.Description
The remote host is running Revive Adserver, an open source PHP-based Ad serving system. This version of Revive Adserver is vulnerable to the following:- A denial-of-service vulnerability that occurs in the 'XML-RPC' implementation. Specifically, the issue affects the 'XML/RPC.php' script. (CVE-2014-8875)
- A cross-site scripting vulnerability because Revive fails to properly sanitize user-supplied input. Specifically, this issue affects the 'refresh_page' parameter of the '/www/admin/report-generate.php' script. (CVE-2014-8793)
Solution
Upgrade to Revive Adserver 3.1.0 or later.See Also
http://www.revive-adserver.com/security/revive-sa-2014-002
http://www.revive-adserver.com/blog/revive-adserver-v3-1-0-released
Plugin Details
Severity: Medium
ID: 8607
Family: CGI
Published: 12/17/2014
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 5.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:revive:revive
Patch Publication Date: 12/17/2014
Vulnerability Publication Date: 12/17/2014
Reference Information
CVE: CVE-2014-8793, CVE-2014-8875