GeneralInformation

Hostnames	bhec.bm mail.bhec.bm www.bhec.bm 138.211.12.198.host.secureserver.net prod.phx3.secureserver.net
Domains	bhec.bm secureserver.net
Country	United States
City	Tempe
Organization	GoDaddy.com, LLC
ISP	GoDaddy.com, LLC
ASN	AS26496

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(2)

CVE-2024-25117

6.8php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypass of restrictions or RCE on projects that are using it, if they do not strictly revalidate the fontName that is passed by php-svg-lib. The `Style::fromAttributes(`), or the `Style::parseCssStyle()` should check the content of the `font-family` and prevents it to use a PHAR url, to avoid passing an invalid and dangerous `fontName` value to other libraries. The same check as done in the `Style::fromStyleSheets` might be reused. Libraries using this library as a dependency might be vulnerable to some bypass of restrictions, or even remote code execution, if they do not double check the value of the `fontName` that is passed by php-svg-lib. Version 0.5.2 contains a fix for this issue.

CVE-2024-5458

5.3In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.

2022(1)

CVE-2022-4900

6.2A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

2013(1)

CVE-2013-2220

7.5Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

2007(1)

CVE-2007-3205

5.0The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

OpenPorts

143 443 465 2095

143 / tcp

1559185454 | 2025-03-27T11:30:31.971695

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN
A001 OK Pre-login capabilities listed, post-login capabilities have more.
* ID ("name" "Dovecot")
A002 OK ID completed.
A003 BAD Error in IMAP command received by server.
* BYE Logging out
A004 OK Logout completed.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4293997805177074961 (0x3b975840d3e2f511)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http:\/\/certs.starfieldtech.com\/repository\/, CN=Starfield Secure Certificate Authority - G2
        Validity
            Not Before: Mar 10 04:24:12 2025 GMT
            Not After : Apr 11 04:24:12 2026 GMT
        Subject: CN=*.prod.phx3.secureserver.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:20:c9:e0:a1:9d:6d:9e:08:55:5e:15:73:
                    9d:f4:e5:20:e8:0c:77:52:7a:1f:87:d4:4f:f0:c2:
                    ef:63:ec:c1:94:8a:39:3d:4a:ff:f7:28:6c:f5:4d:
                    13:fe:86:d7:a2:0c:6a:f1:73:7c:03:cf:9a:85:c3:
                    52:2c:89:e1:88:5f:7f:3c:ef:5f:60:59:4e:e8:15:
                    14:36:8b:b4:b6:22:b1:3a:f2:8d:97:92:a0:e2:0a:
                    05:b0:7e:bd:28:dd:e9:21:0e:98:a7:09:38:0a:a3:
                    36:5e:23:bb:a5:ba:87:41:b8:1f:95:a7:57:35:d8:
                    a1:f8:51:ed:d7:0c:3f:f9:36:81:0f:9e:46:91:47:
                    93:a4:ff:94:be:07:cb:2e:f8:56:8e:de:d2:c4:f5:
                    6b:0d:41:7b:ca:4d:4d:cc:3c:95:3d:b2:79:58:b0:
                    c8:0f:ca:cf:d8:b3:9d:99:16:e7:47:91:f9:61:fa:
                    87:c0:b3:c9:cb:ee:0c:e0:de:c9:7e:fe:76:ba:fc:
                    50:b0:68:54:1c:c7:bf:f5:0b:40:65:5c:bd:39:43:
                    db:0c:ba:a7:c7:6c:b7:06:7c:75:aa:fd:6c:9d:a2:
                    32:19:b1:e7:41:4b:d5:27:94:35:20:7d:08:3b:d3:
                    f3:cc:67:83:f9:c9:cb:3e:75:70:db:cc:f6:90:fd:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.starfieldtech.com/sfig2s1-821.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114414.1.7.23.1
                  CPS: http://certificates.starfieldtech.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.starfieldtech.com/
                CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfig2.crt
            X509v3 Authority Key Identifier: 
                25:45:81:68:50:26:38:3D:3B:2D:2C:BE:CD:6A:D9:B6:3D:B3:66:63
            X509v3 Subject Alternative Name: 
                DNS:*.prod.phx3.secureserver.net, DNS:prod.phx3.secureserver.net
            X509v3 Subject Key Identifier: 
                7E:04:91:B3:89:B0:E6:2A:A7:4D:5F:13:A4:7F:7B:B8:6D:77:0D:B5
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Mar 10 04:24:12.503 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:BA:70:FA:1D:B2:15:69:04:B2:04:54:
                                C4:CB:F1:D7:C8:12:44:69:DD:D7:7B:73:A3:03:D5:DF:
                                9A:CD:DF:45:52:02:20:1C:D0:75:65:0C:27:05:50:4B:
                                76:AE:A5:AD:D0:38:31:A5:18:2F:02:0E:32:A8:0E:1B:
                                BB:3D:82:EB:A9:87:1D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Mar 10 04:24:12.788 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:75:C8:50:A7:61:A5:E2:B3:07:0D:F3:6E:
                                2B:19:C7:96:37:68:9E:74:8C:7C:7C:7C:2D:87:8F:6D:
                                3B:49:05:15:02:20:4A:E9:51:44:7C:D3:9F:1F:B4:B6:
                                96:20:07:88:A3:D9:22:D8:34:4B:12:C5:6C:33:D0:6B:
                                21:77:7C:3B:16:9A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
                                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
                    Timestamp : Mar 10 04:24:12.910 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A4:94:F7:E8:28:D7:E6:1A:76:79:62:
                                6B:81:33:1C:FA:B8:24:3F:DD:C6:B1:46:2E:9D:E2:11:
                                B3:4D:20:85:0F:02:20:31:72:07:1E:B1:E6:F9:9C:E5:
                                27:84:B4:DF:C9:A6:65:67:B0:B0:27:D1:F9:A8:67:0F:
                                5F:6A:E2:CD:A9:E8:C9
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b0:e8:b9:38:28:ba:50:a8:3c:0b:89:75:24:63:52:8e:b7:35:
        5e:e5:bb:db:a0:9d:c4:b8:c5:60:b2:03:93:d9:c1:75:90:2f:
        78:ca:31:06:4f:f6:4a:12:fe:d9:aa:01:d9:bc:36:94:56:63:
        70:c9:8e:5d:34:73:20:a3:cf:8f:fb:21:4b:6e:f0:8d:dd:5c:
        ab:c1:76:99:da:c8:3f:89:30:05:9b:3d:30:a6:98:e0:7f:c7:
        e1:9e:73:cc:e1:bf:d4:44:c8:64:36:87:93:83:a4:cd:be:2f:
        72:3f:5d:f8:43:ce:a5:3d:83:a6:c8:31:29:66:bc:b5:01:9a:
        3a:a7:68:8c:f3:b5:92:78:60:16:43:f3:55:44:80:93:50:c4:
        c2:0b:9b:b9:33:41:49:ee:09:f0:fa:e0:2f:a0:2c:37:72:cd:
        6a:2d:0d:94:a0:40:08:c2:af:d8:d9:93:e8:b8:21:47:88:a1:
        b4:a0:73:3d:49:65:93:9c:9a:a6:02:47:70:72:62:be:e2:ab:
        bb:59:d0:de:0f:22:20:45:e2:a8:b9:90:db:85:f2:3d:9c:de:
        33:2a:68:61:5d:c2:0f:d2:05:c8:e5:53:f4:31:3a:fc:4b:a5:
        95:e7:06:e5:9d:df:e1:10:ec:72:ba:e6:c0:02:7c:27:00:2f:
        03:31:75:ca

443 / tcp

-149368066 | 2025-03-28T09:35:26.884403

Hashes

hash

-95151712

http.dom_hash

1938210126

http.html_hash

-149368066

http.server_hash

869690771

http.sitemap_hash

-1713780646

http.title_hash

-1477287529

Bermuda Health Council | Regulating, Coordinating, and Enhancing the Delivery of Health Services in Bermuda

HTTP/1.1 200 OK
Date: Fri, 28 Mar 2025 09:35:26 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: _sfs_id=4d05474254891a1bfb18f1c3dd5cf6301743154526; expires=Fri, 28-Mar-2025 10:35:26 GMT; Max-Age=3600; path=/; secure; HttpOnly
Set-Cookie: PHPSESSID=d3cf5c7af097348874362d694dad6c51; path=/
Upgrade: h2,h2c
Connection: Upgrade
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:36:c4:75:44:4b:6d:db:76:9b:7d:4d:fb:bc:4e:5c:8a:33
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Mar 12 00:59:29 2025 GMT
            Not After : Jun 10 00:59:28 2025 GMT
        Subject: CN=www.bhec.bm
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:92:78:6a:6f:94:0c:7f:00:d3:11:19:d2:
                    a1:94:5b:f7:3e:c5:ce:c8:6a:fc:4b:27:a7:ed:10:
                    e0:95:e0:62:01:29:94:dd:3c:1e:d8:6c:3f:05:23:
                    da:18:85:10:2a:a1:83:fd:01:f1:4e:4d:80:01:f0:
                    d9:59:d1:bf:4a:f5:27:89:d3:a3:9b:5c:c0:d6:a1:
                    b8:85:77:5c:bb:4f:67:3e:9a:51:9d:3c:42:d4:14:
                    07:d0:1f:8c:11:09:a0:03:f0:dc:69:87:60:a2:16:
                    e9:5a:5a:a6:93:2a:2d:c4:16:58:b4:7e:ab:3f:4d:
                    19:cc:05:5e:61:b6:f7:3e:e9:d0:ed:7a:ba:86:9a:
                    50:8d:cb:a7:8f:fe:1b:8c:eb:b6:bf:90:fc:1a:81:
                    fe:65:15:e4:cd:b9:3f:d1:ca:18:f6:b4:e2:09:fe:
                    a3:52:f0:45:c6:2b:ce:38:57:07:3a:05:cd:8e:8a:
                    9a:9b:27:bd:23:b0:6c:30:ba:a0:52:99:4a:0a:a7:
                    e8:d2:61:bb:0d:d2:15:72:c9:57:e7:7e:8e:7b:e0:
                    df:20:af:10:17:01:de:de:ae:0b:c8:8e:23:01:c8:
                    3a:fd:8f:a6:fa:1c:de:fb:18:7d:02:d5:1f:97:e2:
                    d5:61:cc:68:bc:6a:ee:d4:33:b3:a5:bf:e6:3a:59:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                93:39:8B:F7:8E:BE:CF:44:02:98:7B:C6:F1:B7:6B:22:ED:C4:00:70
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:bhec.bm, DNS:mail.bhec.bm, DNS:www.bhec.bm
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 12 01:57:59.521 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:07:93:0A:A3:6D:AB:DB:FA:4A:B6:A0:0A:
                                F1:3B:21:8C:28:F3:34:C3:EC:51:52:93:DC:61:E8:C0:
                                DC:8B:DF:73:02:21:00:97:9A:E2:42:CD:7C:08:FF:60:
                                1E:46:56:9C:EC:43:ED:4E:D0:D9:8A:87:E8:9C:93:61:
                                EE:D7:FD:AF:F3:7E:B9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Mar 12 01:57:59.839 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AC:52:9C:F1:0E:D3:35:72:28:1D:4D:
                                4B:1F:32:41:E2:50:87:3B:F3:6D:5E:BE:8F:52:34:DD:
                                2D:DF:7A:6E:13:02:21:00:E2:DB:EE:43:3D:72:98:7F:
                                F1:6D:79:4E:A2:72:24:81:FB:26:35:8F:CB:26:23:F7:
                                BE:CE:48:F0:82:F2:04:9E
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b5:72:4b:12:9d:50:fa:ec:88:6f:91:5e:1b:a0:1c:60:9f:87:
        71:24:f5:da:c0:14:b7:01:03:b1:37:2a:6f:a3:53:a7:28:e3:
        95:66:eb:ac:05:32:fe:26:28:79:f9:9c:27:67:5c:81:0f:71:
        65:a2:2e:21:de:2f:3e:ad:b0:1c:f1:de:ea:cc:73:84:02:3a:
        53:7b:76:2e:aa:57:20:9b:fb:eb:b4:b0:09:e8:74:4e:34:42:
        c0:9a:1d:af:ba:a8:2a:21:22:52:59:e5:e5:b8:90:53:b6:a6:
        de:d1:3c:da:9d:78:13:01:24:51:9b:ec:14:34:3a:6e:f0:82:
        70:8a:18:88:0f:61:bd:52:0f:58:a3:08:9d:7f:1a:61:18:9c:
        a2:a3:a0:b5:d3:ae:9e:90:f9:98:24:41:ea:15:22:b7:6d:04:
        cf:71:f6:12:0f:41:6a:7d:c9:95:bb:9b:70:c0:8d:d9:f3:ee:
        22:1a:51:29:23:f3:74:cd:a6:0e:16:c3:20:f9:53:43:46:b0:
        41:6c:4c:51:9f:f2:88:4d:ce:94:0c:4c:07:46:c5:89:1a:52:
        c1:09:0a:7a:bf:51:e0:5c:72:6e:4c:3a:8a:0c:04:94:0a:15:
        29:0b:11:f1:f2:89:6d:7b:ed:b7:37:81:48:a8:1c:45:8a:04:
        86:40:72:e0

Vulnerabilities

1 4

465 / tcp

-635980363 | 2025-03-23T00:22:34.217739

220-p3plmcpnl496119.prod.phx3.secureserver.net ESMTP Exim 4.96.2 #2 Sat, 22 Mar 2025 17:22:29 -0700 
220-We do not authorize the use of this system to transport unsolicited, 
220 and/or bulk e-mail.
250-p3plmcpnl496119.prod.phx3.secureserver.net Hello lk0v2ix79h7ymas.net [224.101.234.60]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPECONNECT
250-AUTH PLAIN LOGIN
250 HELP

2095 / tcp

511194899 | 2025-04-08T03:12:39.796919

Hashes

hash

-1659894057

http.dom_hash

-1992579052

http.html_hash

511194899

HTTP/1.1 301 Moved
Content-length: 140
Location: https://p3plmcpnl496119.prod.phx3.secureserver.net:2096/
Content-type: text/html; charset="utf-8"
Cache-Control: no-cache, no-store, must-revalidate, private

198.12.211.138

Last Seen: 2025-04-08

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

143 / tcp

1559185454 | 2025-03-27T11:30:31.971695

443 / tcp

-149368066 | 2025-03-28T09:35:26.884403

Hashes

Apache httpd

465 / tcp

-635980363 | 2025-03-23T00:22:34.217739

Exim smtpd4.96.2

2095 / tcp

511194899 | 2025-04-08T03:12:39.796919

Hashes

Products

Pricing

Contact Us

198.12.211.138

Last Seen: 2025-04-08

Tags:

GeneralInformation

Vulnerabilities All ports Port 443 Latest CVSS

OpenPorts

143 / tcp 1559185454 | 2025-03-27T11:30:31.971695

443 / tcp -149368066 | 2025-03-28T09:35:26.884403

Hashes

Apache httpd

465 / tcp -635980363 | 2025-03-23T00:22:34.217739

Exim smtpd4.96.2

2095 / tcp 511194899 | 2025-04-08T03:12:39.796919

Hashes

Products

Pricing

Contact Us

Vulnerabilities

143 / tcp

1559185454 | 2025-03-27T11:30:31.971695

443 / tcp

-149368066 | 2025-03-28T09:35:26.884403

465 / tcp

-635980363 | 2025-03-23T00:22:34.217739

2095 / tcp

511194899 | 2025-04-08T03:12:39.796919