Lucene search

MitreCVE-2006-0248

HistoryJan 18, 2006 - 2:00 a.m.

CVE-2006-0248

2006-01-1802:00:00

mitre

web.nvd.nist.gov

cve-2006-0248

virata-emweb

web server

vulnerability

intracom jetspeed

allied data technologies

router

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.009

Percentile

82.6%

JSON

Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 500 and 520 and (2) Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests.

Affected configurations

Nvd

Node

intracomjetspeedMatch500

intracomjetspeedMatch520

VendorProductVersionCPE
intracomjetspeed500cpe:2.3:a:intracom:jetspeed:500:*:*:*:*:*:*:*
intracomjetspeed520cpe:2.3:a:intracom:jetspeed:520:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intracom	jetspeed	500	cpe:2.3:a:intracom:jetspeed:500:::::::*
intracom	jetspeed	520	cpe:2.3:a:intracom:jetspeed:520:::::::*

References

blog.globalnetworks.gr/?p=4

secunia.com/advisories/18483

www.vupen.com/english/advisories/2006/0218

exchange.xforce.ibmcloud.com/vulnerabilities/24304

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.009

Percentile

82.6%

JSON

Related for CVE-2006-0248