Detections
Analytics

OpenVMS WASD HTTP Server Multiple Vulnerabilities

critical Nessus Plugin ID 17150

Language:

Synopsis

The remote host has an application that may allow arbitrary code execution on the remote system.

Description

According to its banner, the remote host appears to be running WASD HTTP server - a web server for the OpenVMS platform.

The remote version of this software is affected by various vulnerabilities that may allow an attacker to execute arbitrary code on the remote host.

Solution

Upgrade to OpenVMS WASD 7.2.4, 8.0.1 or 8.1

Plugin Details

Severity: Critical

ID: 17150

File Name: openvms_wasd_http.nasl

Version: 1.12

Type: remote

Family: Web Servers

Published: 2/19/2005

Updated: 7/16/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.0

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 11/30/2005

Reference Information

CVE: CVE-2002-1825

BID: 5811