CVE-2013-4885: Medium severity libpcap vulnerability

Published Oct 26, 2013
·
Updated

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.

Affected Software

190 affected components
Nmap Nmap<=6.25
Nmap Nmap=2.1-beta1
Nmap Nmap=2.2-beta2
Nmap Nmap=2.2-beta3
Nmap Nmap=2.2-beta4
Nmap Nmap=2.3-beta10
Nmap Nmap=2.3-beta12
Nmap Nmap=2.3-beta13
Nmap Nmap=2.3-beta14
Nmap Nmap=2.3-beta17
Nmap Nmap=2.3-beta18
Nmap Nmap=2.3-beta19
Nmap Nmap=2.3-beta20
Nmap Nmap=2.3-beta21
Nmap Nmap=2.3-beta4
Nmap Nmap=2.3-beta5
Nmap Nmap=2.3-beta6
Nmap Nmap=2.3-beta8
Nmap Nmap=2.3-beta9
Nmap Nmap=2.05
Nmap Nmap=2.06
Nmap Nmap=2.07
Nmap Nmap=2.08
Nmap Nmap=2.09
Nmap Nmap=2.10
Nmap Nmap=2.11
Nmap Nmap=2.12
Nmap Nmap=2.50
Nmap Nmap=2.51
Nmap Nmap=2.52
Nmap Nmap=2.53
Nmap Nmap=2.54-beta1
Nmap Nmap=2.54-beta16
Nmap Nmap=2.54-beta19
Nmap Nmap=2.54-beta2
Nmap Nmap=2.54-beta20
Nmap Nmap=2.54-beta21
Nmap Nmap=2.54-beta22
Nmap Nmap=2.54-beta24
Nmap Nmap=2.54-beta25
Nmap Nmap=2.54-beta26
Nmap Nmap=2.54-beta27
Nmap Nmap=2.54-beta28
Nmap Nmap=2.54-beta29
Nmap Nmap=2.54-beta3
Nmap Nmap=2.54-beta30
Nmap Nmap=2.54-beta31
Nmap Nmap=2.54-beta32
Nmap Nmap=2.54-beta33
Nmap Nmap=2.54-beta34
Nmap Nmap=2.54-beta35
Nmap Nmap=2.54-beta36
Nmap Nmap=2.54-beta37
Nmap Nmap=2.54-beta4
Nmap Nmap=2.54-beta5
Nmap Nmap=2.54-beta6
Nmap Nmap=2.54-beta7
Nmap Nmap=2.99-rc1
Nmap Nmap=2.99-rc2
Nmap Nmap=3.00
Nmap Nmap=3.10-alpha1
Nmap Nmap=3.10-alpha2
Nmap Nmap=3.10-alpha3
Nmap Nmap=3.10-alpha4
Nmap Nmap=3.10-alpha5
Nmap Nmap=3.10-alpha7
Nmap Nmap=3.10-alpha9
Nmap Nmap=3.15-beta1
Nmap Nmap=3.15-beta2
Nmap Nmap=3.15-beta3
Nmap Nmap=3.20
Nmap Nmap=3.25
Nmap Nmap=3.26
Nmap Nmap=3.27
Nmap Nmap=3.28
Nmap Nmap=3.30
Nmap Nmap=3.40-pvt1
Nmap Nmap=3.40-pvt10
Nmap Nmap=3.40-pvt11
Nmap Nmap=3.40-pvt12
Nmap Nmap=3.40-pvt13
Nmap Nmap=3.40-pvt14
Nmap Nmap=3.40-pvt15
Nmap Nmap=3.40-pvt16
Nmap Nmap=3.40-pvt17
Nmap Nmap=3.40-pvt2
Nmap Nmap=3.40-pvt3
Nmap Nmap=3.40-pvt4
Nmap Nmap=3.40-pvt6
Nmap Nmap=3.40-pvt7
Nmap Nmap=3.40-pvt8
Nmap Nmap=3.40-pvt9
Nmap Nmap=3.45
Nmap Nmap=3.48
Nmap Nmap=3.50
Nmap Nmap=3.55
Nmap Nmap=3.70
Nmap Nmap=3.75
Nmap Nmap=3.81
Nmap Nmap=3.90
Nmap Nmap=3.91
Nmap Nmap=3.93
Nmap Nmap=3.94-alpha1
Nmap Nmap=3.94-alpha2
Nmap Nmap=3.94-alpha3
Nmap Nmap=3.95
Nmap Nmap=3.96-beta1
Nmap Nmap=3.98-beta1
Nmap Nmap=3.99
Nmap Nmap=3.999
Nmap Nmap=3.9999
Nmap Nmap=4.00
Nmap Nmap=4.01
Nmap Nmap=4.02-alpha1
Nmap Nmap=4.02-alpha2
Nmap Nmap=4.03
Nmap Nmap=4.04-beta1
Nmap Nmap=4.10
Nmap Nmap=4.11
Nmap Nmap=4.20
Nmap Nmap=4.20-alpha1
Nmap Nmap=4.20-alpha10
Nmap Nmap=4.20-alpha11
Nmap Nmap=4.20-alpha2
Nmap Nmap=4.20-alpha3
Nmap Nmap=4.20-alpha4
Nmap Nmap=4.20-alpha5
Nmap Nmap=4.20-alpha6
Nmap Nmap=4.20-alpha7
Nmap Nmap=4.20-alpha8
Nmap Nmap=4.20-alpha9
Nmap Nmap=4.20-rc1
Nmap Nmap=4.20-rc2
Nmap Nmap=4.21-alpha1
Nmap Nmap=4.21-alpha2
Nmap Nmap=4.21-alpha3
Nmap Nmap=4.21-alpha4
Nmap Nmap=4.22-soc1
Nmap Nmap=4.22-soc2
Nmap Nmap=4.22-soc3
Nmap Nmap=4.22-soc5
Nmap Nmap=4.22-soc6
Nmap Nmap=4.22-soc7
Nmap Nmap=4.22-soc8
Nmap Nmap=4.49-rc1
Nmap Nmap=4.49-rc2
Nmap Nmap=4.49-rc3
Nmap Nmap=4.49-rc4
Nmap Nmap=4.49-rc5
Nmap Nmap=4.49-rc6
Nmap Nmap=4.49-rc7
Nmap Nmap=4.50
Nmap Nmap=4.51-beta
Nmap Nmap=4.52
Nmap Nmap=4.53
Nmap Nmap=4.60
Nmap Nmap=4.62
Nmap Nmap=4.65
Nmap Nmap=4.68
Nmap Nmap=4.75
Nmap Nmap=4.76
Nmap Nmap=4.85-beta1
Nmap Nmap=4.85-beta10
Nmap Nmap=4.85-beta2
Nmap Nmap=4.85-beta3
Nmap Nmap=4.85-beta4
Nmap Nmap=4.85-beta5
Nmap Nmap=4.85-beta6
Nmap Nmap=4.85-beta7
Nmap Nmap=4.85-beta8
Nmap Nmap=4.85-beta9
Nmap Nmap=4.90-rc1
Nmap Nmap=5.00
Nmap Nmap=5.10-beta1
Nmap Nmap=5.10-beta2
Nmap Nmap=5.20
Nmap Nmap=5.21
Nmap Nmap=5.30-beta1
Nmap Nmap=5.35-dc1
Nmap Nmap=5.50
Nmap Nmap=5.51
Nmap Nmap=5.59-beta1
Nmap Nmap=5.61-test1
Nmap Nmap=5.61-test2
Nmap Nmap=5.61-test4
Nmap Nmap=5.61-test5
Nmap Nmap=6.00
Nmap Nmap=6.01
Nmap Nmap=6.20-beta1
openSUSE openSUSE=12.3

Remediation

Patch Available

https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3

Event History

Oct 26, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2013-4885?

CVE-2013-4885 has a medium severity level due to its potential for causing unauthorized file uploads.

2

How do I fix CVE-2013-4885?

To fix CVE-2013-4885, upgrade to NMap versions 6.40 or later.

3

What types of systems are affected by CVE-2013-4885?

CVE-2013-4885 affects multiple versions of NMap prior to 6.40.

4

What is the exploit mechanism for CVE-2013-4885?

CVE-2013-4885 exploits directory traversal vulnerabilities in the http-domino-enum-passwords.nse script.

5

Can CVE-2013-4885 be exploited remotely?

Yes, CVE-2013-4885 allows remote attackers to upload files through crafted parameters.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203