| Package | Affected versions | Patched versions |
|---|---|---|
| netcat | = 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 3.0≤ 3.12 |
Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the redirect parameter in a logoff action to modules/auth/index.php or (2) the url parameter to modules/linkmanager/redirect.php. NOTE: this was reported within an "HTTP Response Splitting" section in the original disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free