Lucene search

K
cve[email protected]CVE-2006-2096
HistoryApr 29, 2006 - 10:02 a.m.

CVE-2006-2096

2006-04-2910:02:00
web.nvd.nist.gov
26
cve-2006-2096
land down under
ldu 802
information security
sensitive information
remote attackers
web security

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message.

Affected configurations

NVD
Node
neocromeland_down_underRange802
OR
neocromeland_down_underMatch601
OR
neocromeland_down_underMatch602
OR
neocromeland_down_underMatch700.01
OR
neocromeland_down_underMatch700.02
OR
neocromeland_down_underMatch700.03
OR
neocromeland_down_underMatch700.04
OR
neocromeland_down_underMatch700.05
OR
neocromeland_down_underMatch701
OR
neocromeland_down_underMatch800
OR
neocromeland_down_underMatch801

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

Related for CVE-2006-2096