GeneralInformation

Hostnames	91-224-237-24.zapnet-isp.net
Domains	zapnet-isp.net
Country	Poland
City	Ostrów Wielkopolski
Organization	Slawomir Zapart trading as ZAPNET KAROL ZAPART Sp.j.
ISP	Slawomir Zapart trading as ZAPNET KAROL ZAPART Sp.j.
ASN	AS197833

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2019-11072

7.5lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burl_normalize_2F_to_slash_fix in burl.c. NOTE: The developer states "The feature which can be abused to cause the crash is a new feature in lighttpd 1.4.50, and is not enabled by default. It must be explicitly configured in the config file (e.g. lighttpd.conf). Certain input will trigger an abort() in lighttpd when that feature is enabled. lighttpd detects the underflow or realloc() will fail (in both 32-bit and 64-bit executables), also detected in lighttpd. Either triggers an explicit abort() by lighttpd. This is not exploitable beyond triggering the explicit abort() with subsequent application exit.

CVE-2018-19052

5.0An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.

OpenPorts

22 81 1443

1450647834 | 2024-05-10T21:19:23.707603

22 / tcp

SSH-2.0-dropbear
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQCV40s9vWK68/dQNcNFIKVtnf9CNOIdLZTxBaL8Yinxq9/v
klmwnIOx3zYzXgCTyKC0vDU9svS3I7R5Jvh6qrsHCOA5nYwIAtHj6mdeF0XT8FGZ9jRtJKqb3cOB
vV+7KC7iaHQmTDuYf4d2pCsRs8YRgm9ohtugXLsU9zeQm4GmBquO3iUcJHng2AOq6V1zoDAFan1a
gI1sziFEgKQ8oAv52A4UdixWuZ1yFksoQwNATjy+qYNAcFwJp525s0MXR0aSQC8uytTeGGcJLc8U
SSqQKiz6drnTgplOQVp0mJgmbac6+fh3lk6LS8EDIpKOzPJPtHsGsm7BTSRGWrCTPw65
Fingerprint: 60:e2:3b:0b:4a:60:08:3f:01:1d:a2:2c:be:13:7f:b9

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1
	diffie-hellman-group1-sha1

Server Host Key Algorithms:
	ssh-rsa
	ssh-dss

Encryption Algorithms:
	aes128-ctr
	aes256-ctr

MAC Algorithms:
	hmac-sha1
	hmac-sha2-256

Compression Algorithms:
	none

-1260676215 | 2024-05-06T04:13:47.671060

81 / tcp

HTTP/1.1 302 Found
Location: https://91.224.237.24:1443/
Content-Length: 0
Date: Sun, 23 Jul 2023 12:56:15 GMT
Server: lighttpd/1.4.39

91.224.237.24

Last Seen: 2024-05-10

GeneralInformation

Vulnerabilities

OpenPorts

1450647834 | 2024-05-10T21:19:23.707603
22 / tcp

-1260676215 | 2024-05-06T04:13:47.671060
81 / tcp

lighttpd1.4.39

Products

Pricing

Contact Us