SecureScoutDescriptions

Reference resources

Descriptions

Vulnerability test cases mapped to CVE records, network-security terminology, and the reference databases that anchor the rest of the publication.

This subdomain is the reference layer of SecureScout. The test-case archive indexes vulnerability checks by their internal SecureScout identifier and links each to its corresponding CVE record. The glossary captures recurring network-security terminology referenced across our writeups. The references page lists the upstream CVE and vulnerability databases we cite throughout. For original research and editorial coverage, see the main publication.

Test cases

Each entry maps a SecureScout test-case identifier to its CVE record. Technical content is drawn from the public CVE record (NVD, MITRE) and the original vendor advisory where applicable.

tc/11010 2007

ICMP netmask request

Probe for ICMP type 17 (Address Mask Request) responses. Leaks subnet mask, supports network mapping.

CVE-1999-0524
tc/11011 2007

ICMP timestamp request

Probe for ICMP type 13 (Timestamp Request) responses. Leaks system clock, supports time-skew and session-prediction analysis.

CVE-1999-0524
tc/17969 2007

myBloggie 2.1.6 SQL injection

Unauthenticated SQL injection via user_id parameter on index.php; authenticated admin path via post_id on admin.php.

CVE-2007-1899
tc/17973 2007

FaName 1.0 cross-site scripting

Three reflected XSS injection points across index.php and page.php. Cluster suggests no central output-encoding helper.

CVE-2007-3653
tc/17970 2007

myBloggie 2.1.6 path disclosure

Three error paths leak PHP install path: calendar.php invalid year, common.php direct request, login.php mode-array.

CVE-2007-3650
tc/17971 2007

FaName 1.0 path disclosure

Quote-semicolon in id parameter triggers DB error that echoes the install path. Chaining primitive for include attacks.

CVE-2007-3651
tc/17972 2007

FaName 1.0 SQL injection

SQL injection via id parameter in class/page.php. May be the same root cause as CVE-2008-0328.

CVE-2007-3652
tc/15192 2005

Firefox / Mozilla HTTP authentication focus

Background tab can pop an HTTP-auth dialog without raising focus. Phishing-relevant browser UI-trust issue.

CVE-2005-0584
tc/18636 2007

Apache Tomcat directory traversal via mod_jk

URI normalization mismatch between Apache HTTPD (mod_jk/mod_proxy_ajp) and Tomcat permits path traversal beyond docroot.

CVE-2007-0450

View the full test-case index →

Glossary

Recurring network and security terms that appear throughout the test-case archive and the main publication.

Microsoft-DSglossary/255

The IANA-registered name for TCP port 445, used by Microsoft Directory Services for Server Message Block (SMB) over TCP. SMB on port 445 superseded the earlier NetBIOS over TCP/IP transport (ports 137 to 139) starting with Windows 2000. From a network security perspective, port 445 is one of the most-attacked ports on the internet because of the long history of remote SMB vulnerabilities (MS08-067, EternalBlue, and similar). Conventional security practice is to block inbound 445/tcp at the perimeter and restrict it inside the network to authorized hosts.

kill bitglossary/283

A registry-based mechanism in Microsoft Windows that disables a specific COM/ActiveX control from being instantiated by Internet Explorer or other COM hosts. Each control is identified by its CLSID; the kill bit is set in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CLSID}\Compatibility Flags with the value 0x00000400. Microsoft used the kill bit as the standard mitigation for ActiveX vulnerabilities throughout the 2000s, issuing dozens of cumulative kill bit updates via Windows Update.

View the glossary index →

Reference databases

The authoritative CVE and vulnerability databases we cite across SecureScout. Each entry below opens to the upstream source.

Standalone references page →