What’s Vulnerable › Vulnerabilities

CVE-2013-4885

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-10-26 · updated 2026-06-16

Description

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.

Affected products

• Nmap: through 6.25; 2.1-beta1, 2.2-beta2, 2.2-beta3, 2.2-beta4, 2.3-beta10, 2.3-beta12 (+182)
• Opensuse: 12.3

References

• http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html
• http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html
• http://nmap.org/changelog.html
• http://packetstormsecurity.com/files/122719/TWSL2013-025.txt
• https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3
• https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt
• http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html
• http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html
• http://nmap.org/changelog.html
• http://packetstormsecurity.com/files/122719/TWSL2013-025.txt
• https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3
• https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt

Get alerted when CVE-2013-4885 or the next vulnerability affects your stack