CVE-2011-3502 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

####################################################################### Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/Cogent_DataHub.html Versions: <= 7.1.1.63 Platforms: Windows Bug: source disclosure Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: aluigi@autistici.org web: aluigi.org ####################################################################### 1) Introduction 2) Bug 3) The Code 4) Fix ####################################################################### =============== 1) Introduction =============== DataHub is a software for the SCADA and automation sector. ####################################################################### ====== 2) Bug ====== The server/service listens on port 80 using a custom web server. Through the appending of the following chars it's possible to view the content of the server-side scripts on the server: + %20 %2e This vulnerability is useful when the server hosts customized scripts which seems a feature of the software: http://www.cogentdatahub.com/Features/DataHub_Web_ASP.html ####################################################################### =========== 3) The Code =========== http://SERVER/index.asp+ http://SERVER/index.asp%20 http://SERVER/index.asp%2e ####################################################################### ====== 4) Fix ====== No fix. #######################################################################