Lucene search

K
cveMitreCVE-2006-1296
HistoryMar 19, 2006 - 11:02 p.m.

CVE-2006-1296

2006-03-1923:02:00
mitre
web.nvd.nist.gov
28
cve-2006-1296
beagle
vulnerability
untrusted search path
privilege escalation
local users
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

66.3%

Untrusted search path vulnerability in Beagle 0.2.2.1 might allow local users to gain privileges via a malicious beagle-info program in the current working directory, or possibly directories specified in the PATH.

Affected configurations

Nvd
Node
beagle-projectbeagleMatch0.2.2.1
VendorProductVersionCPE
beagle-projectbeagle0.2.2.1cpe:2.3:a:beagle-project:beagle:0.2.2.1:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

66.3%