Lucene search

[email protected]CVE-2006-0636

HistoryFeb 10, 2006 - 11:02 a.m.

CVE-2006-0636

2006-02-1011:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0636

eyeos

security vulnerability

remote code execution

nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.4%

JSON

desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attackers to execute arbitrary PHP code and possibly conduct other attacks by modifying critical assumed-immutable variables, as demonstrated using PHP code in the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable.

CPENameOperatorVersion
eyeos_project:eyeoseyeos project eyeoseq0.8.2_r1
eyeos_project:eyeoseyeos project eyeoseq0.8.5
eyeos_project:eyeoseyeos project eyeoseq0.8.9
eyeos_project:eyeoseyeos project eyeoseq0.8.3_r1
eyeos_project:eyeoseyeos project eyeoseq0.8.2_r3
eyeos_project:eyeoseyeos project eyeoseq0.8.4_r1
eyeos_project:eyeoseyeos project eyeoseq0.8.3
eyeos_project:eyeoseyeos project eyeoseq0.8.4
eyeos_project:eyeoseyeos project eyeoseq0.8.2_r2
eyeos_project:eyeoseyeos project eyeoseq0.8.3_r2

CPE	Name	Operator	Version
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.2_r1
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.5
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.9
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.3_r1
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.2_r3
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.4_r1
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.3
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.4
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.2_r2
eyeos_project:eyeos	eyeos project eyeos	eq	0.8.3_r2

Rows per page:

1-10 of 181

References

secunia.com/advisories/18757

securityreason.com/securityalert/419

securitytracker.com/id?1015609

www.gulftech.org/?node=research&article_id=00096-02072006

www.securityfocus.com/archive/1/424329/100/0/threaded

www.securityfocus.com/bid/16537

www.vupen.com/english/advisories/2006/0466

exchange.xforce.ibmcloud.com/vulnerabilities/24569

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.4%

JSON

Related for CVE-2006-0636

prion1 openvas2