Description
Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script.
References
- http://www.ultraseek.com/support/docs/RELNOTES.txt
- 22892 vdb-entry
- 21120 vdb-entry
- 30286 vdb-entry
- VU#559616 third-party-advisory
- 20061115 ZDI-06-042: Verity Ultraseek Request Proxying Vulnerability mailing-list
- verity-ultraseek-highlight-info-disclosure(30311) vdb-entry
- 1017235 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-06-042.html