CVE-2015-8400

ALTO 7.4CVE-2015-8400 · Published 12/01/2016 · updated 17/06/2026

In breve

CVE-2015-8400 è una vulnerabilità ALTO (CVSS 7.4) che riguarda shellinabox (shellinabox project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 81.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
shellinabox shellinabox_project	`≤ 2.18`	No fix yet

Description

The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.

References

lists.fedoraproject.org/pipermail/package-announce/2016-January/175117.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/175224.html
openwall.com/lists/oss-security/2015/12/02/6
openwall.com/lists/oss-security/2015/12/02/7
shellinabox/shellinabox · Vendor Advisory
shellinabox/shellinabox release v2.19 · Patch

Altre vulnerabilità di shellinabox

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free