# CVE triage sheet - familytree.lan.ddnsgeek.com

Generated (UTC): 2026-04-14T07:48:16.890425+00:00

| CVE | Affected host | Endpoint | Product/version evidence | Exploit precondition | Reproducibility | Disposition |
|---|---|---|---|---|---|---|
| CVE-2003-1418 | familytree.lan.ddnsgeek.com | `unknown` | http       syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); http     syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | Target must expose Apache mod_include with vulnerable SSI execution behavior. | not-reproduced | **needs-manual-test** |
|  |  |  |  |  |  | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
| CVE-2005-3299 | familytree.lan.ddnsgeek.com | `443/tcp` | ssl/http   syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | Target must run Apache 2.0.x with mod_imap module enabled and vulnerable to cross-site scripting behavior. | not-reproduced | **needs-manual-test** |
|  |  |  |  |  |  | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
| CVE-2009-3733 | familytree.lan.ddnsgeek.com | `/sdk/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/vmware/hostd/vmInventory.xml` | No explicit product/version fingerprint in nmap service line. | Target must expose VMware SDK endpoint (/sdk) and allow traversal into host files. | not-reproduced | **needs-manual-test** |
|  |  |  |  |  |  | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
| CVE-2011-0966 | familytree.lan.ddnsgeek.com | `/cwhp/auditLog.do?file=..\..\..\..\..\..\..\Program%20Files\CSCOpx\MDC\Tomcat\webapps\triveni\WEB-INF\classes\schedule.properties` | No explicit product/version fingerprint in nmap service line. | Target must be Cisco Unified Operations Manager 8.0/8.5 with vulnerable auditLog.do traversal handling. | not-reproduced | **needs-manual-test** |
|  |  |  |  |  |  | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
| CVE-2013-6235 | familytree.lan.ddnsgeek.com | `unknown` | http       syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); http     syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | Validate affected product/version and exploit path prerequisites before filing. | not-reproduced | **needs-manual-test** |
|  |  |  |  |  |  | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
| CVE-2018-10822 | familytree.lan.ddnsgeek.com | `/uir//etc/passwd` | No explicit product/version fingerprint in nmap service line. | Target must be affected D-Link router firmware exposing /uir/ traversal path. | not-reproduced | **needs-manual-test** |
|  |  |  |  |  |  | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
| CVE-2018-10824 | familytree.lan.ddnsgeek.com | `/uir//tmp/csman/0` | No explicit product/version fingerprint in nmap service line. | Target must be affected D-Link router firmware exposing plaintext credential path under /tmp/csman. | not-reproduced | **needs-manual-test** |
|  |  |  |  |  |  | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
| CVE-2019-1653 | familytree.lan.ddnsgeek.com | `/cgi-bin/config.exp` | No explicit product/version fingerprint in nmap service line. | Validate affected product/version and exploit path prerequisites before filing. | not-reproduced | **needs-manual-test** |
|  |  |  |  |  |  | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |