OSVDB ID: 20979 Title: Google Search Appliance proxystylesheet Service Discovery |
Info |
|
|
Dates |
||||
|
|
Description |
The Google Search Appliance contains a flaw that allows a remote attacker to enumerate open services on other systems. The issue is due to the proxystylesheet parameter in the search request, which allows almost any host and port combination in the URL for a remote XSLT style sheet. The error message returned to the browser indicates whether a given host and port was available. |
Classification |
Location:
Remote / Network Access
Attack Type: Other Impact: Loss of Confidentiality Exploit: Exploit Public Disclosure: OSVDB Verified OSVDB: Web Related |
Solution |
Upgrade to the version specified by Google advisory GA-2005-08-m, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
metasploit.com - DigitalOffense