CVE-2005-3756
First published: Tue Nov 22 2005(Updated: )
Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Search Appliance | ||
| Google Search Appliance Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://metasploit.com/research/vulns/google_proxystylesheet/
- http://www.securityfocus.com/bid/15509
- http://www.osvdb.org/20979
- http://securitytracker.com/id?1015246
- http://secunia.com/advisories/17644
- http://www.vupen.com/english/advisories/2005/2500
- http://www.securityfocus.com/archive/1/417310/30/0/threaded
Frequently Asked Questions
What is the severity of CVE-2005-3756?
CVE-2005-3756 is rated as a medium severity vulnerability.
How do I fix CVE-2005-3756?
To mitigate CVE-2005-3756, restrict access to the Google Mini and Search Appliances to only trusted networks.
Who is affected by CVE-2005-3756?
CVE-2005-3756 affects users of the Google Mini Search Appliance and potentially the Google Search Appliance.
What type of attack is associated with CVE-2005-3756?
CVE-2005-3756 allows attackers to perform remote port scanning through the Google Mini and Search Appliances.
Can CVE-2005-3756 lead to further exploitation?
Yes, if exploited, CVE-2005-3756 could allow attackers to identify open ports, potentially facilitating further attacks.
- agent/remedy
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- vendor/google
- product/mini search appliance
- canonical/google mini search appliance
- product/search appliance
- canonical/google search appliance
- agent/software-canonical-lookup-request
- collector/nvd-index
- canonical/google search appliance software