Lucene search

[email protected]CVE-2006-0522

HistoryFeb 02, 2006 - 11:02 a.m.

CVE-2006-0522

2006-02-0211:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0522

sql injection

symantec

sms

authentication

security vulnerability

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.9%

JSON

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.

CPENameOperatorVersion
symantec:sygate_management_serversymantec sygate management servereq4.0_mr_1_build_1104_english
symantec:sygate_management_serversymantec sygate management servereq3.5_mr_3_build_894_english
symantec:sygate_management_serversymantec sygate management servereq4.1_ga_build_1258_japanese
symantec:sygate_management_serversymantec sygate management serverle4.1_mr_2_build_1417_english
symantec:sygate_management_serversymantec sygate management servereq4.1_mr1_build_1351_chinese

CPE	Name	Operator	Version
symantec:sygate_management_server	symantec sygate management server	eq	4.0_mr_1_build_1104_english
symantec:sygate_management_server	symantec sygate management server	eq	3.5_mr_3_build_894_english
symantec:sygate_management_server	symantec sygate management server	eq	4.1_ga_build_1258_japanese
symantec:sygate_management_server	symantec sygate management server	le	4.1_mr_2_build_1417_english
symantec:sygate_management_server	symantec sygate management server	eq	4.1_mr1_build_1351_chinese

References

secunia.com/advisories/18689

securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html

securitytracker.com/id?1015561

www.osvdb.org/22883

www.securityfocus.com/bid/16452

www.vupen.com/english/advisories/2006/0402

exchange.xforce.ibmcloud.com/vulnerabilities/24413

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.9%

JSON

Related for CVE-2006-0522

prion1 checkpoint_advisories1 symantec1