Lucene search

[email protected]CVE-2006-2405

HistoryMay 16, 2006 - 10:02 a.m.

CVE-2006-2405

2006-05-1610:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-2405

directory traversal

unclassified newsboard

unb

security vulnerability

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.4%

JSON

Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via … (dot dot) sequences and a trailing null byte (%00) in the ABBC[Config][smileset] parameter to unb_lib/abbc.css.php.

CPENameOperatorVersion
unclassified_newsboard:unclassified_newsboardunclassified newsboardeq1.5.3a
unclassified_newsboard:unclassified_newsboardunclassified newsboardle1.6.1_patch1
unclassified_newsboard:unclassified_newsboardunclassified newsboardeq1.5.3
unclassified_newsboard:unclassified_newsboardunclassified newsboardeq1.5.3_patch3
unclassified_newsboard:unclassified_newsboardunclassified newsboardeq1.6.1

CPE	Name	Operator	Version
unclassified_newsboard:unclassified_newsboard	unclassified newsboard	eq	1.5.3a
unclassified_newsboard:unclassified_newsboard	unclassified newsboard	le	1.6.1_patch1
unclassified_newsboard:unclassified_newsboard	unclassified newsboard	eq	1.5.3
unclassified_newsboard:unclassified_newsboard	unclassified newsboard	eq	1.5.3_patch3
unclassified_newsboard:unclassified_newsboard	unclassified newsboard	eq	1.6.1

References

newsboard.unclassified.de/forum/post/6499

retrogod.altervista.org/unb_161p1_incl_xpl.html

secunia.com/advisories/20090

securityreason.com/securityalert/899

www.osvdb.org/25494

www.securityfocus.com/archive/1/433686/100/0/threaded

www.securityfocus.com/bid/17947

www.vupen.com/english/advisories/2006/1782

exchange.xforce.ibmcloud.com/vulnerabilities/26507

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.4%

JSON

Related for CVE-2006-2405

cvelist1 prion1