GeneralInformation

Hostnames	arch.uic.edu artandarthistory.uic.edu cada.uic.edu web1.cada.uic.edu design.uic.edu gallery400.uic.edu larp.uic.edu theatreandmusic.uic.edu
Domains	uic.edu
Country	United States
City	Chicago
Organization	University of Illinois Chicago
ISP	University of Illinois Chicago
ASN	AS6200

WebTechnologies

Analytics

CMS

Hosting

JavaScript libraries

Programming languages

PHP

Tag managers

Google Tag Manager

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2019-0190	5.0A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.
CVE-2009-3767	4.3libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2009-3766	6.8mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2009-3765	6.8mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2009-1390	6.8Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.

OpenPorts

80 443

-402010002 | 2024-05-08T03:10:43.297798

80 / tcp

HTTP/1.1 301 Moved Permanently
Date: Wed, 08 May 2024 03:10:43 GMT
Server: Apache/2.4.59 (codeit) OpenSSL/3.0.13+quic PHP/7.4.33
Location: https://cada.uic.edu/
Content-Length: 229
Content-Type: text/html; charset=iso-8859-1

-1490246342 | 2024-05-08T14:18:28.030938

443 / tcp

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:18:07 GMT
Server: Apache/2.4.59 (codeit) OpenSSL/3.0.13+quic PHP/7.4.33
X-Content-Type-Options: nosniff
X-Powered-By: PHP/7.4.33
X-Drupal-Cache: HIT
Etag: "1715174556-0"
Content-Language: en
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-Generator: Drupal 7 (https://www.drupal.org)
Link: <https://arch.uic.edu/>; rel="canonical",<https://arch.uic.edu/>; rel="shortlink"
X-UA-Compatible: IE=Edge,chrome=1
Cache-Control: public, max-age=0
Last-Modified: Wed, 08 May 2024 13:22:36 GMT
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Vary: Cookie,Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c9:b6:05:78:59:7e:09:c8:b6:12:b9:1f:03:20:e4
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=MI, L=Ann Arbor, O=Internet2, OU=InCommon, CN=InCommon RSA Server CA
        Validity
            Not Before: Oct 26 00:00:00 2023 GMT
            Not After : Oct  5 23:59:59 2024 GMT
        Subject: C=US, ST=Illinois, O=University of Illinois, CN=web1.cada.uic.edu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:db:dd:cd:48:ed:86:ca:6b:4e:4c:1a:08:1c:20:
                    d5:d9:9b:a9:3c:5a:dc:f9:4e:7c:d0:f1:d3:d6:08:
                    b8:f9:0f:f2:89:43:79:b5:b5:34:27:42:3f:2c:18:
                    52:3f:18:f5:5a:b9:5d:5b:ad:c8:a6:91:2e:ef:69:
                    d5:fb:3b:26:26:56:69:74:e6:0e:b9:8e:b6:59:b5:
                    72:39:64:ae:1f:a7:b4:25:bd:a9:98:02:e8:4d:51:
                    7e:c1:72:1d:9f:b9:63:7b:04:4e:53:41:3e:89:3a:
                    2e:16:eb:14:07:a2:19:7e:ad:8f:b1:53:46:2a:ed:
                    17:c1:6b:3c:ee:b0:dc:80:5a:2d:92:06:d9:dc:74:
                    01:5c:bc:fe:46:21:52:04:80:7c:0c:ad:29:01:cd:
                    ca:0b:bc:d9:db:ff:df:b7:db:92:b5:60:a2:b7:a7:
                    96:a3:74:41:33:75:b9:04:58:98:a2:40:c9:cd:7f:
                    29:b1:25:cf:c4:5d:a1:21:0f:57:5a:81:ea:bb:68:
                    fe:19:16:0c:51:e0:93:c0:19:98:54:bc:9d:d0:cc:
                    a8:d3:42:4e:70:5b:df:ca:85:c8:fd:e8:ff:56:54:
                    ca:93:f9:1e:a9:de:c4:d2:42:cd:64:47:0e:32:7e:
                    15:12:54:46:29:1f:d9:83:ba:b7:5f:e8:d4:30:29:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                1E:05:A3:77:8F:6C:96:E2:5B:87:4B:A6:B4:86:AC:71:00:0C:E7:38
            X509v3 Subject Key Identifier: 
                11:AA:95:83:22:DB:54:29:8D:E9:D7:55:7C:73:5F:C9:40:CF:02:DB
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.5923.1.4.3.1.1
                  CPS: https://www.incommon.org/cert/repository/cps_ssl.pdf
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/InCommonRSAServerCA_2.crt
                OCSP - URI:http://ocsp.usertrust.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Oct 26 23:13:47.772 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F5:2D:C8:16:4B:BC:C3:E9:E0:17:78:
                                24:ED:8B:84:50:7A:47:74:31:DE:81:44:AD:12:EF:68:
                                C1:AC:DD:B7:28:02:20:5C:3C:E7:78:FF:CB:58:5C:7D:
                                47:53:6E:9B:05:FF:39:BF:1B:3E:63:39:4D:76:2D:2B:
                                70:27:68:83:0D:21:7F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Oct 26 23:13:47.858 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:83:85:C0:07:2E:3D:1B:A8:F3:88:51:
                                92:80:45:BD:EE:1D:52:82:AB:20:D9:04:44:0A:7C:8B:
                                93:70:CA:39:D3:02:21:00:92:7E:94:9E:F7:53:3A:9A:
                                66:B5:F4:BE:B6:EE:7C:DB:C3:98:D7:DE:0C:7C:4E:B8:
                                4C:15:D5:8A:BE:9D:75:B3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Oct 26 23:13:47.818 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:77:B8:AA:33:03:6A:89:73:2C:DF:26:B8:
                                01:35:B3:D0:CB:F9:4E:21:47:C3:1A:EC:6C:BC:2B:EA:
                                A9:C2:F1:59:02:20:56:AD:8F:F8:AB:11:9C:15:6A:C5:
                                8A:55:CB:D5:45:D0:3C:D5:D8:C2:B1:38:CA:E8:11:9B:
                                A6:36:86:5E:0F:F2
            X509v3 Subject Alternative Name: 
                DNS:web1.cada.uic.edu, DNS:arch.uic.edu, DNS:artandarthistory.uic.edu, DNS:cada.uic.edu, DNS:design.uic.edu, DNS:gallery400.uic.edu, DNS:larp.uic.edu, DNS:theatreandmusic.uic.edu
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7b:e3:fc:c1:3b:5c:64:22:96:c3:0a:bf:70:c8:b7:f2:c8:b8:
        69:69:4c:a7:04:a9:c6:26:9c:17:ed:87:7f:0b:eb:8e:46:b1:
        21:6f:6f:25:a8:b0:a5:cb:2e:ca:5f:c5:f9:3b:5a:8e:3f:21:
        3e:d1:1f:5f:86:5b:a2:31:a5:01:dc:b5:d9:69:43:9f:2f:cf:
        95:8f:59:d5:72:b8:8c:48:5a:b9:dd:09:6e:17:02:c2:87:a5:
        0a:49:83:c6:97:a7:fc:41:e4:f3:c2:cd:2f:5f:2a:77:3c:09:
        1c:a2:c3:9d:98:82:82:d0:4c:8e:7e:7f:53:85:b1:5a:49:ae:
        37:af:d5:9c:2f:f9:38:f7:30:bf:c0:3a:43:01:2d:f1:37:e2:
        e4:1f:5f:a1:ee:a6:6a:5b:c0:14:ce:4a:28:aa:6c:d0:09:8a:
        f9:dc:57:64:a0:fe:ad:c6:44:36:b8:fb:99:a4:5a:10:b3:e2:
        32:c9:31:28:17:c0:d6:09:98:54:49:ee:b6:0c:dd:16:46:09:
        2c:05:23:23:c1:14:80:a8:75:c4:c1:0b:90:41:d5:35:e7:d5:
        22:32:7e:65:5e:d6:3d:aa:af:2a:97:af:f0:4e:24:28:8a:72:
        d0:99:79:bc:27:84:de:bf:02:98:84:a7:4f:d1:e7:79:9d:c6:
        7d:b0:52:3f

131.193.110.36

Last Seen: 2024-05-08

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-402010002 | 2024-05-08T03:10:43.297798
80 / tcp

Apache httpd2.4.59

-1490246342 | 2024-05-08T14:18:28.030938
443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

131.193.110.36

Last Seen: 2024-05-08

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-402010002 | 2024-05-08T03:10:43.297798 80 / tcp

Apache httpd2.4.59

-1490246342 | 2024-05-08T14:18:28.030938 443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

-402010002 | 2024-05-08T03:10:43.297798
80 / tcp

-1490246342 | 2024-05-08T14:18:28.030938
443 / tcp