Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Sun Cobalt Adaptive Firewall Detection

Information

Severity

Severity

Medium

Family

Family

Web application abuses

CVSSv2 Base

CVSSv2 Base

5.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Solution Type

Solution Type

Mitigation

Created

Created

18 years ago

Modified

Modified

5 years ago

Summary

Sun Cobalt machines contain a firewall mechanism, this mechanism can be configured remotely by accessing Cobalt's built-in HTTP server. Upon access to the HTTP server, a java based administration program would start, where a user is required to enter a pass phrase in order to authenticate himself. Since no username is required, just a passphrase bruteforcing of this interface is easier.

Solution

Solution

Access to this port (by default set to port 8181) should not be permitted from the outside. Further access to the firewall interface itself should not be allowed (by default set to port 2005).