CVE-2005-3756: Medium severity google mini search appliance vulnerability
Published Nov 22, 2005
·Updated
Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports.
Affected Software
2 affected components
Google Mini Search Appliance
Google Search Appliance
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Nov 22, 2005
CVE Published
09:03 PM
Nov 23, 2005
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3756?
CVE-2005-3756 is rated as a medium severity vulnerability.
2
How do I fix CVE-2005-3756?
To mitigate CVE-2005-3756, restrict access to the Google Mini and Search Appliances to only trusted networks.
3
Who is affected by CVE-2005-3756?
CVE-2005-3756 affects users of the Google Mini Search Appliance and potentially the Google Search Appliance.
4
What type of attack is associated with CVE-2005-3756?
CVE-2005-3756 allows attackers to perform remote port scanning through the Google Mini and Search Appliances.
5
Can CVE-2005-3756 lead to further exploitation?
Yes, if exploited, CVE-2005-3756 could allow attackers to identify open ports, potentially facilitating further attacks.