GREED Multiple Remote Vulnerabilities

high Nessus Network Monitor Plugin ID 2471

Synopsis

The remote host is running an inherently insecure protocol or application.

Description

The remote host is using GREED, a wget-like tool to fetch HTTP and FTP data from a command-line.
This software is unmaintained and contains multiple flaws that may allow an attacker to execute arbitrary commands on the remote host by sending malformed replies to the client requests.

Solution

Discontinue the usage of this software.

Plugin Details

Severity: High

ID: 2471

Family: Web Clients

Published: 12/19/2004

Updated: 3/6/2019

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.6

Temporal Score: 7.2

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:U/RC:X

Reference Information

BID: 12033, 12034