GeneralInformation

Hostnames	blm.gov www.adoptahorse.blm.gov afs.ak.blm.gov fire.ak.blm.gov sdms.ak.blm.gov www.ak.blm.gov www.az.blm.gov www.birdsofprey.blm.gov www.co.blm.gov www.fire.blm.gov www.glorecords.blm.gov www.idahofireinfo.blm.gov www.landscape.blm.gov web.mt.blm.gov glorecords.navigator.blm.gov www.nm.blm.gov www.ntc.blm.gov www.nv.blm.gov opac.blm.gov www.opac.blm.gov afmss.training.blm.gov www.ut.blm.gov www.wildhorseandburro.blm.gov www.wy.blm.gov
Domains	blm.gov
Country	United States
City	Denver
Organization	Bureau of Land Management
ISP	U.S. Department of the Interior
ASN	AS22284

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2019-0190	5.0A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.
CVE-2009-3767	4.3libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2009-3766	6.8mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2009-3765	6.8mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2009-1390	6.8Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.

OpenPorts

443

1615890568 | 2024-05-09T01:26:52.950224

443 / tcp

HTTP/1.1 200 OK
Strict-Transport-Security: max-age=31622400; includeSubDomains; preload
Date: Thu, 09 May 2024 01:26:52 GMT
Server: Apache/2.4.59 (Unix) OpenSSL/3.2.1 mod_jk/1.2.46
Last-Modified: Tue, 23 Apr 2024 01:15:56 GMT
Accept-Ranges: bytes
Content-Type: text/html
set-cookie: TBMCookie_13836693420873092821=1417990017152180129IYSM7xmeFDnD22ZOptXQvkFnEo=; path=/
set-cookie: ___utmvm=###########; path=/
Content-Length: 10498
Set-Cookie: JSESSSIONID=107221164.1.1218258880.4294692982; path=/; secure

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:96:41:be:65:26:14:96:ef:05:44:e0:c1:37:7f:2a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Jun  7 00:00:00 2023 GMT
            Not After : Jul  7 23:59:59 2024 GMT
        Subject: C=US, ST=Colorado, L=Denver, O=Bureau of Land Management, CN=*.blm.gov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:cf:d7:36:d6:02:60:4e:77:c1:24:eb:d3:
                    ec:a2:5b:f2:e9:1f:0e:9e:f0:df:67:09:f7:51:23:
                    bf:bf:5d:5b:0f:19:0b:79:b1:f8:f0:dc:d6:09:c4:
                    a3:5a:ed:fd:4c:61:79:ed:1c:fa:d2:5c:d9:29:be:
                    2d:8b:d3:b8:ad:e9:86:e9:77:7e:b7:52:c1:08:4f:
                    e4:88:e1:dd:a1:4d:5c:8f:1a:37:40:09:ac:4d:be:
                    78:8c:32:3e:21:b6:3d:ea:c0:80:56:ee:31:4b:8b:
                    2a:4f:dc:14:f3:75:1e:79:af:cf:84:b1:05:0e:cd:
                    74:a8:56:5e:eb:99:02:6b:c2:2e:df:4e:d7:a7:48:
                    fa:5b:8b:e8:85:cb:51:9a:e0:13:04:ac:d5:8d:1a:
                    6d:fc:29:ea:b2:24:d5:cd:d7:89:1a:52:c0:ca:70:
                    ff:9c:25:1c:1e:83:e1:7b:d0:06:ce:a6:ed:94:8a:
                    01:0f:ae:1b:d9:2d:af:d4:db:5e:2a:fc:24:2b:37:
                    f0:57:a3:76:69:7b:3d:69:2d:71:8e:86:4d:fc:42:
                    b8:92:03:16:57:cf:43:2d:16:ff:8a:b4:65:fa:5c:
                    a4:09:cc:c7:da:ab:f7:e5:8a:2b:ba:f8:29:f1:1a:
                    3a:de:90:b7:3e:e3:50:9f:60:30:df:7b:5f:9b:59:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4
            X509v3 Subject Key Identifier: 
                B2:E1:CD:50:8B:1B:61:DE:F0:E9:A6:EE:26:91:CD:35:21:3F:2F:E2
            X509v3 Subject Alternative Name: 
                DNS:*.blm.gov, DNS:www.az.blm.gov, DNS:www.birdsofprey.blm.gov, DNS:afmss.training.blm.gov, DNS:www.co.blm.gov, DNS:www.fire.blm.gov, DNS:www.landscape.blm.gov, DNS:fire.ak.blm.gov, DNS:afs.ak.blm.gov, DNS:www.idahofireinfo.blm.gov, DNS:www.glorecords.blm.gov, DNS:www.adoptahorse.blm.gov, DNS:www.nm.blm.gov, DNS:www.ntc.blm.gov, DNS:www.nv.blm.gov, DNS:www.ut.blm.gov, DNS:www.wildhorseandburro.blm.gov, DNS:www.wy.blm.gov, DNS:blm.gov, DNS:www.ak.blm.gov, DNS:web.mt.blm.gov, DNS:sdms.ak.blm.gov, DNS:glorecords.navigator.blm.gov, DNS:opac.blm.gov, DNS:www.opac.blm.gov
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Jun  7 22:23:14.521 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:74:1F:26:B1:16:EB:18:07:7C:11:C5:4A:
                                7A:9B:8C:01:09:8F:1F:89:E9:04:B0:F2:DF:16:05:B9:
                                33:D4:C8:42:02:20:70:D9:53:3B:AB:D3:57:BB:88:E7:
                                06:1D:23:F3:B5:F2:0A:3A:A6:23:56:45:DE:3A:CC:D9:
                                84:0B:B0:4B:81:4C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jun  7 22:23:14.574 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B7:46:C7:12:FA:87:FF:46:17:AB:1E:
                                F6:D6:51:EA:7C:B5:92:41:14:36:00:1E:2B:DA:0D:4F:
                                18:E7:45:7C:E1:02:21:00:AA:3A:32:6E:20:54:A1:F6:
                                D3:0F:C8:0C:8D:3F:22:98:95:5A:B1:E0:81:D3:12:CC:
                                2F:9D:4B:16:A1:52:63:82
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Jun  7 22:23:14.540 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B3:C3:95:ED:E2:61:F1:F3:C1:72:11:
                                20:6E:0D:DB:AC:DF:04:0C:A8:C7:30:D7:4E:DE:82:F1:
                                B9:E0:73:AB:1E:02:21:00:B5:D8:4A:F5:00:86:39:EA:
                                B1:3D:B9:56:AF:FA:B5:AF:CB:72:85:AC:38:75:B8:1E:
                                41:82:CB:D0:0D:B2:46:53
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a7:1e:46:6c:aa:de:0a:20:c3:ac:cd:37:17:48:d1:7b:f1:e0:
        02:63:a3:d2:c9:3e:88:62:6c:14:d7:39:ed:fc:21:d2:da:83:
        14:a3:dc:87:8b:d4:fe:6c:e4:ca:50:d7:a8:c6:71:71:a1:a2:
        e0:fd:01:1e:18:f7:ad:07:69:ae:38:16:db:f3:32:98:fb:51:
        f9:dc:6f:42:79:4d:66:e1:2a:a7:46:98:74:33:da:91:0f:8e:
        91:64:f2:8b:c8:37:b0:ff:20:78:65:15:80:f3:d5:d2:b5:32:
        c4:d6:da:d7:25:e4:d2:ef:e2:24:3d:f1:eb:66:cf:50:d4:92:
        01:88:89:2f:1f:d4:79:09:ec:97:17:f7:25:3e:d2:8b:4b:f5:
        c3:4f:08:cb:53:4d:58:f3:e9:3d:65:bd:da:95:51:94:1c:3b:
        db:a9:94:bc:69:67:6d:a8:c6:d3:6f:d9:04:5d:d8:85:72:0a:
        07:1b:a6:3a:d0:15:ff:68:f6:61:bc:c0:af:7b:ab:0a:f3:50:
        ce:d3:bd:5e:e4:67:72:06:3b:c9:96:31:ad:8e:34:db:7c:d5:
        76:89:4f:50:ae:ca:e4:88:6b:1e:a8:b9:c5:bf:14:51:e3:ee:
        38:9c:f6:c5:89:51:d4:9f:25:74:20:84:09:dc:75:c9:fe:42:
        1f:64:e2:35

204.124.92.195

Last Seen: 2024-05-09

GeneralInformation

Vulnerabilities

OpenPorts

1615890568 | 2024-05-09T01:26:52.950224
443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

204.124.92.195

Last Seen: 2024-05-09

GeneralInformation

Vulnerabilities

OpenPorts

1615890568 | 2024-05-09T01:26:52.950224 443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

1615890568 | 2024-05-09T01:26:52.950224
443 / tcp