GeneralInformation

Hostnames	bogsfootwear.com www.bogsfootwear.com
Domains	bogsfootwear.com
Country	United States
City	San Jose
Organization	SiteSpect
ISP	Unitas Global
ASN	AS12182

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2019-0190	5.0A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.
CVE-2009-3767	4.3libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2009-3766	6.8mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2009-3765	6.8mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2009-1390	6.8Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.

OpenPorts

80 443

-240368644 | 2024-05-04T13:43:15.575169

80 / tcp

HTTP/1.1 301 Moved Permanently
Date: Sat, 04 May 2024 13:43:14 GMT
Server: Apache/2.4.59 (Win64) OpenSSL/3.1.5
Set-Cookie: SSID=CQBoAR0qAAAAAABzOzZmKKsBIHM7NmYBAAAAAAAAAAAAczs2ZgCd6SkmAQN-YiUAczs2ZgEAdT8BA6_kJwBzOzZmAQCU6AAD9YAgAHM7NmYBAA; path=/; domain=74.217.215.31; expires=Sun, 04-May-2025 13:43:15 GMT; HttpOnly
Set-Cookie: SSSC=791.G7365139606255282984.1|59540.2130165:75305.2450046:81781.2614447; path=/; domain=74.217.215.31; HttpOnly
Set-Cookie: SSRT=czs2ZgABAA; path=/; domain=74.217.215.31; expires=Sun, 04-May-2025 13:43:15 GMT; HttpOnly
RTSS: 2-7-128
Location: https://74.217.215.31/shop/index.html
Cache-Control: private, max-age=0, proxy-revalidate, no-store, no-cache, must-revalidate
Expires: Sun, 05 Nov 2023 13:22:25 GMT
Content-Type: text/html; charset=iso-8859-1
Pragma: no-cache
Vary: Accept-Encoding
Transfer-Encoding: chunked

-1288231917 | 2024-05-05T13:55:22.125237

443 / tcp

HTTP/1.1 302 Found
Date: Sun, 05 May 2024 13:55:20 GMT
Server: Apache/2.4.59 (Win64) OpenSSL/3.1.5
Set-Cookie: SSID=CQDuah0qAAAAAADJjzdm1IUAD8mPN2YBAAAAAAAAAAAAyY83ZgCd6SkmAQN-YiUAyY83ZgEAlOgAA_WAIADJjzdmAQB1PwEDr-QnAMmPN2YBAA; path=/; domain=74.217.215.31; expires=Mon, 05-May-2025 13:55:21 GMT; HttpOnly; Secure
Set-Cookie: SSSC=791.G7365513809290626516.1|59540.2130165:75305.2450046:81781.2614447; path=/; domain=74.217.215.31; HttpOnly; Secure
Set-Cookie: SSRT=yY83ZgABAA; path=/; domain=74.217.215.31; expires=Mon, 05-May-2025 13:55:21 GMT; HttpOnly; Secure
RTSS: 2-7-60
Location: https://www.bogsboots.de/shop/index.html?source=BO
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Cache-Control: private, max-age=0, proxy-revalidate, no-store, no-cache, must-revalidate
Expires: Sun, 05 Nov 2023 13:29:25 GMT
Vary: Accept-Encoding
Set-Cookie2: Apache=d7d51187.617b54db95039; path=/; domain=.bogsfootwear.com; version=1; Secure
Set-Cookie2: BNES_Apache=D6AcDhoIN49T1ExwgY7mG76b0bxuDOZN0rGvPk+9xRzTW0Bvuad1DHLIZFubLus+HH/OY2mMMowSKvFRqAFmAkSx+QLSH7gM; path=/; domain=.bogsfootwear.com; version=1; Secure
Set-Cookie: bo_pin=www.bogsboots.de/shop/index.html?source=BO; Max-Age=1800; Expires=Sun, 05-May-2024 14:25:20 GMT; Path=/; Secure; HttpOnly
Set-Cookie: BNES_bo_pin=NHsJeinOTYgLn6Alhtu8XNFZkYXl1Ft1N1yb07izWw1pmiTla0Rrx4DxU9qv8SL29LSHZOGpE7qIcgpQDOLuE4zB/SSdVKLSu2yub3eVmyoX+15QzDgdDw==; Max-Age=1800; Expires=Sun, 05-May-2024 14:25:20 GMT; Path=/; Secure; HttpOnly
Pragma: no-cache
Transfer-Encoding: chunked

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5595100864703203038 (0x4da5ca97a31d86de)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Jan  3 19:09:22 2024 GMT
            Not After : Feb  3 19:09:22 2025 GMT
        Subject: CN=www.bogsfootwear.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:4c:04:6c:67:c1:c9:7a:03:62:ff:5c:c7:
                    bc:ca:04:ca:06:05:10:a9:93:77:61:44:8d:22:0c:
                    84:f8:d8:df:0a:f1:4f:05:4f:9d:10:26:fa:ce:7b:
                    15:aa:52:62:3b:a0:a2:0c:10:4b:98:dd:a4:31:dc:
                    5d:a3:38:bf:0f:12:0c:62:ec:35:9e:9e:63:ab:aa:
                    0c:1a:ef:64:61:07:6e:c5:d8:5d:54:49:9f:43:9e:
                    4f:73:a6:8b:e7:24:b5:d1:ce:c5:18:05:ed:b3:8e:
                    56:98:37:25:c3:b7:86:8c:78:1a:54:03:64:22:7c:
                    c3:62:eb:1a:3a:0e:ec:c1:25:50:2e:96:a4:0a:10:
                    f1:09:2f:c6:50:fe:97:a3:80:b2:48:0f:28:9c:fd:
                    9c:9b:ee:46:d5:b6:d9:9e:02:db:b9:50:90:e0:64:
                    11:63:7b:6e:10:0d:82:27:4f:8d:1a:34:16:6b:69:
                    1e:10:79:05:40:0d:5b:92:1b:6e:4d:cc:5c:8e:13:
                    96:46:3a:60:d9:b4:e2:16:1a:a8:4d:70:4e:94:10:
                    13:bb:c2:c3:6f:1c:6b:92:24:77:a8:13:5c:84:9a:
                    83:c0:a9:31:cf:b2:33:58:c1:b0:88:e1:96:a7:69:
                    f3:fd:4b:b0:2f:93:06:cd:a9:91:b4:4a:2f:6e:fc:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s1-14750.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.1
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Alternative Name: 
                DNS:www.bogsfootwear.com, DNS:bogsfootwear.com
            X509v3 Subject Key Identifier: 
                C3:45:D4:66:23:64:A4:B8:1A:9D:0A:A2:BC:6B:2D:C2:90:16:92:46
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jan  3 19:09:33.511 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9A:44:55:27:2F:A9:87:67:09:5D:DE:
                                9B:3B:5A:42:4A:C5:65:67:92:B2:68:5C:CC:9C:3E:DB:
                                98:66:D0:49:D1:02:21:00:8C:6D:C5:A9:92:E7:CD:FC:
                                EE:88:FA:9B:DE:6D:B0:CA:1B:47:0D:66:4D:9A:B2:8E:
                                06:04:DD:7E:1D:78:D6:DE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan  3 19:09:33.783 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:4A:90:CE:2A:CD:93:93:A6:FE:B3:94:42:
                                BF:E3:4D:B6:98:E0:92:7C:30:A8:A2:4A:BF:71:0F:19:
                                CC:4D:2D:0E:02:21:00:A8:C5:53:E8:20:EB:32:91:07:
                                64:FA:09:22:50:CE:77:7D:D1:B3:04:25:52:6D:53:4E:
                                35:8C:BF:D3:D0:33:62
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jan  3 19:09:33.890 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:06:96:97:45:F2:6B:30:43:B8:B5:97:44:
                                28:FE:E2:65:48:E5:7E:3C:4D:46:C4:72:AD:C7:CD:3C:
                                8B:AF:27:BC:02:20:59:A0:5E:19:68:C2:5C:EB:1C:EB:
                                72:AD:00:8A:13:F4:FB:24:35:AA:F1:C8:7A:50:C7:3F:
                                7D:E5:80:8B:6E:89
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        57:73:05:13:1d:be:ba:48:92:9a:a0:f8:ff:ba:92:7a:d2:50:
        37:e1:d5:32:71:73:9b:1e:d0:39:7c:e1:5e:9a:c0:17:55:50:
        b3:6f:56:7d:c9:2b:34:f3:74:0e:2d:59:27:0f:01:ce:7a:d9:
        8e:47:a2:56:18:21:13:a7:64:b4:fc:85:40:30:e0:61:b3:c8:
        af:ca:83:ab:3e:40:35:93:84:e9:9c:40:09:fb:9b:05:26:e1:
        72:6e:1b:cd:9a:9a:b6:ac:16:bf:9f:63:d1:4e:06:22:f2:8c:
        d6:a9:62:21:d9:3e:cb:36:46:bf:14:86:aa:30:13:3f:4a:d7:
        d9:d5:8c:d8:20:3f:af:8f:e1:95:05:65:da:fd:72:33:0d:e3:
        52:1f:f6:1a:94:0f:d4:d4:7f:e9:df:28:59:dc:80:82:06:ce:
        75:f0:00:3e:9b:fc:f5:4e:c6:1e:b9:33:63:f9:4a:87:9b:b8:
        7c:56:f5:e9:a1:c6:1a:b8:85:92:6f:67:76:0c:8d:21:56:f3:
        18:77:fc:40:c6:96:a3:61:fd:2b:46:7b:4a:65:69:93:c1:b5:
        61:88:45:42:c3:d2:39:c7:99:eb:1c:90:c6:3e:6d:c6:de:03:
        4b:f5:55:5c:c1:7f:b1:df:91:43:36:25:4c:69:77:3b:e2:22:
        d5:b5:7b:5c

74.217.215.31

Last Seen: 2024-05-05

GeneralInformation

Vulnerabilities

OpenPorts

-240368644 | 2024-05-04T13:43:15.575169
80 / tcp

Apache httpd2.4.59

-1288231917 | 2024-05-05T13:55:22.125237
443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

74.217.215.31

Last Seen: 2024-05-05

GeneralInformation

Vulnerabilities

OpenPorts

-240368644 | 2024-05-04T13:43:15.575169 80 / tcp

Apache httpd2.4.59

-1288231917 | 2024-05-05T13:55:22.125237 443 / tcp

Apache httpd2.4.59

Products

Pricing

Contact Us

-240368644 | 2024-05-04T13:43:15.575169
80 / tcp

-1288231917 | 2024-05-05T13:55:22.125237
443 / tcp