Shodan

173.249.60.4

Regular View Raw Data
Last Seen: 2024-04-20
Tags:
eol-product

GeneralInformation

Hostnames vmd59153.contaboserver.net
Domains contaboserver.net 
Country Germany
City Frankfurt am Main
Organization Contabo GmbH
ISP Contabo GmbH
ASN AS51167

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2022-31008 RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.

OpenPorts 

1546818390 | 2024-04-19T17:35:23.697675
22 / tcp 
50704379 | 2024-04-20T02:27:42.000220
4369 / tcp 
-268271615 | 2024-04-20T05:00:34.135591
5672 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved