CVE-2005-3756

Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-11-22

Last modified

2024-08-07

Affected products

• Mini Search Appliance (Google)
• Search Appliance (Google)

References

• http://metasploit.com/research/vulns/google_proxystylesheet/
• http://secunia.com/advisories/17644
• http://securitytracker.com/id?1015246
• http://www.osvdb.org/20979
• http://www.securityfocus.com/archive/1/417310/30/0/threaded
• http://www.securityfocus.com/bid/15509
• http://www.vupen.com/english/advisories/2005/2500