Lucene search
HistoryFeb 22, 2006 - 2:02 a.m.
CVE-2006-0845
cve-2006-0845
leif m. wright's blog 3.5
remote authenticated users
arbitrary programs
sendmail vulnerability
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
71.9%
Leif M. Wright’s Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname.
Affected configurations
Node
leif_m._wrightweb_blogMatch3.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| leif_m._wright:web_blog | leif m. wright web blog | eq | 3.5 |
Related
nvd
nvd
CVE-2006-0845
2006-02-22 02:02:00
prion
prion
Code injection
2006-02-22 02:02:00
cvelist
cvelist
CVE-2006-0845
2006-02-22 02:00:00
securityvulns
securityvulns
[eVuln] Leif M. Wright's Blog Multiple Vulnerabilities
2006-03-01 00:00:00
packetstorm
packetstorm
EV0082.txt
2006-03-03 00:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
71.9%
Related for CVE-2006-0845