Lucene search
HistoryFeb 23, 2006 - 11:02 p.m.
CVE-2006-0864
global hauri
virobot
2.0
20050817
filescan
cve-2006-0864
vulnerability
security
nvd
7.1 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.018 Low
EPSS
Percentile
88.3%
filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value.
Affected configurations
Node
haurivirobotMatch2.0_2005-08-17
| CPE | Name | Operator | Version |
|---|---|---|---|
| hauri:virobot | hauri virobot | eq | 2.0_2005-08-17 |
References
Related
nessus
nessus
ViRobot Linux Server filescan Authentication Bypass
2006-02-22 00:00:00
prion
prion
Design/Logic Flaw
2006-02-23 23:02:00
cvelist
cvelist
CVE-2006-0864
2006-02-23 23:00:00
nvd
nvd
CVE-2006-0864
2006-02-23 23:02:00
7.1 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.018 Low
EPSS
Percentile
88.3%
Related for CVE-2006-0864