ID de Prueba:	1.3.6.1.4.1.25623.1.0.140459
Categoría:	Databases
Título:	Redis Cross Protocol Scripting Vulnerability
Resumen:	networking.c in Redis allows 'Cross Protocol Scripting' because it lacks a;check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack;triggers an HTTP request to the Redis TCP port).
Descripción:	Summary: networking.c in Redis allows 'Cross Protocol Scripting' because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port). Affected Software/OS: Redis 3.2.6 and prior. Solution: Update to version 3.2.7 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10517 BugTraq ID: 101572 http://www.securityfocus.com/bid/101572 https://github.com/antirez/redis/commit/874804da0c014a7d704b3d285aa500098a931f50 https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES https://www.reddit.com/r/redis/comments/5r8wxn/redis_327_is_out_important_security_fixes_inside/
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.