GREED Multiple Remote Vulnerabilities

High Nessus Network Monitor Plugin ID 2471

Synopsis

The remote host is running an inherently insecure protocol or application.

Description

The remote host is using GREED, a wget-like tool to fetch HTTP and FTP data from a command-line.
This software is unmaintained and contains multiple flaws that may allow an attacker to execute arbitrary commands on the remote host by sending malformed replies to the client requests.

Solution

Discontinue the usage of this software.

Plugin Details

Severity: High

ID: 2471

File Name: 2471.prm

Family: Web Clients

Published: 2004/12/19

Modified: 2016/02/05

Dependencies: 1735, 8314

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.6

Temporal Score: 7.2

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:U/RC:ND

CVSSv3

Base Score: 8.1

Temporal Score: 7.9

Vector: CVSS3#AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:F/RL:U/RC:X

Reference Information

BID: 12033, 12034