autorecon/results/familytree.lan.ddnsgeek.com/scans/_cve_triage.md

CVE triage sheet - familytree.lan.ddnsgeek.com

Generated (UTC): 2026-04-14T07:48:16.890425+00:00

CVE	Affected host	Endpoint	Product/version evidence	Exploit precondition	Reproducibility	Disposition
CVE-2003-1418	familytree.lan.ddnsgeek.com	unknown	http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)	Target must expose Apache mod_include with vulnerable SSI execution behavior.	not-reproduced	needs-manual-test
						Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.
CVE-2005-3299	familytree.lan.ddnsgeek.com	443/tcp	ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)	Target must run Apache 2.0.x with mod_imap module enabled and vulnerable to cross-site scripting behavior.	not-reproduced	needs-manual-test
						Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.
CVE-2009-3733	familytree.lan.ddnsgeek.com	/sdk/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/vmware/hostd/vmInventory.xml	No explicit product/version fingerprint in nmap service line.	Target must expose VMware SDK endpoint (/sdk) and allow traversal into host files.	not-reproduced	needs-manual-test
						Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.
CVE-2011-0966	familytree.lan.ddnsgeek.com	/cwhp/auditLog.do?file=..\..\..\..\..\..\..\Program%20Files\CSCOpx\MDC\Tomcat\webapps\triveni\WEB-INF\classes\schedule.properties	No explicit product/version fingerprint in nmap service line.	Target must be Cisco Unified Operations Manager 8.0/8.5 with vulnerable auditLog.do traversal handling.	not-reproduced	needs-manual-test
						Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.
CVE-2013-6235	familytree.lan.ddnsgeek.com	unknown	http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)	Validate affected product/version and exploit path prerequisites before filing.	not-reproduced	needs-manual-test
						Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.
CVE-2018-10822	familytree.lan.ddnsgeek.com	/uir//etc/passwd	No explicit product/version fingerprint in nmap service line.	Target must be affected D-Link router firmware exposing /uir/ traversal path.	not-reproduced	needs-manual-test
						Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.
CVE-2018-10824	familytree.lan.ddnsgeek.com	/uir//tmp/csman/0	No explicit product/version fingerprint in nmap service line.	Target must be affected D-Link router firmware exposing plaintext credential path under /tmp/csman.	not-reproduced	needs-manual-test
						Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.
CVE-2019-1653	familytree.lan.ddnsgeek.com	/cgi-bin/config.exp	No explicit product/version fingerprint in nmap service line.	Validate affected product/version and exploit path prerequisites before filing.	not-reproduced	needs-manual-test
						Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.