Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: FreeBSD Local Security Checks --> Category: infos

FreeBSD : SA-04:16.fetch Vulnerability Scan

Vulnerability Scan Summary
Check for the version of the FreeBSD

Detailed Explanation for this Vulnerability Test

The remote host is running a version of FreeBSD which contains a flaw in the
'fetch' utility.

'fetch' is a command-line tool used to retrieve data at a given URL. It is used
(among others) by the FreeBSD port collection.

There is an integer overflow condition in the processing of HTTP headers
which may result in a buffer overflow.

A possible hacker may exploit this flaw to execute arbitrary commands on the remote
host. To exploit this flaw, a possible hacker would need to lure a victim on the remote
host into downloading a URL from a malicious web server using this utility.

Solution :
Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.