PPLive TCP Port 9415 'tudouva.pac' Open Proxy Vulnerability
BID:47508
Info
PPLive TCP Port 9415 'tudouva.pac' Open Proxy Vulnerability
| Bugtraq ID: | 47508 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 20 2011 12:00AM |
| Updated: | Apr 20 2011 12:00AM |
| Credit: | hinkydink |
| Vulnerable: |
PPLive PPLive 1.9.21 PPLive PPLive 0 |
| Not Vulnerable: | |
Discussion
PPLive TCP Port 9415 'tudouva.pac' Open Proxy Vulnerability
PPLive is prone to an open proxy vulnerability because of an insecure default configuration.
A remote attacker may exploit this condition in order to launch attacks against local and public services in the context of the site that is hosting the vulnerable script.
PPLive is prone to an open proxy vulnerability because of an insecure default configuration.
A remote attacker may exploit this condition in order to launch attacks against local and public services in the context of the site that is hosting the vulnerable script.
Exploit / POC
PPLive TCP Port 9415 'tudouva.pac' Open Proxy Vulnerability
Attackers can exploit this issue with readily available tools.
Attackers can exploit this issue with readily available tools.
Solution / Fix
PPLive TCP Port 9415 'tudouva.pac' Open Proxy Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
PPLive TCP Port 9415 'tudouva.pac' Open Proxy Vulnerability
References:
References:
- Insecure Defaults In PPLiveAV Client (
) - Port 9415: Mystery SOLVED (hinkydink)
- PPLive Homepage (PPLive)