CVE-2010-2989 nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a respo...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nessus web server plugin | = 1.2.4 | No fix listed |
References
- 20100726 Nessus Vulnerabilities mailing-list
- discussions.nessus.org vendor-advisory