Lucene search

MitreCVE-2006-2814

HistoryJun 05, 2006 - 5:02 p.m.

CVE-2006-2814

2006-06-0517:02:00

mitre

web.nvd.nist.gov

ishopcart

buffer overflow

remote code execution

sslinvoice

cve-2006-2814

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.147

Percentile

95.8%

JSON

Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing “Submit” in an sslinvoice action, and allow remote attackers to have an unknown impact via a large amount of posted data.

Affected configurations

Nvd

Node

ishopcartishopcart

VendorProductVersionCPE
ishopcartishopcart*cpe:2.3:a:ishopcart:ishopcart:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ishopcart	ishopcart	*	cpe:2.3:a:ishopcart:ishopcart::::::::

References

secunia.com/advisories/20415

securityreason.com/securityalert/1031

www.securityfocus.com/archive/1/435597/100/0/threaded

www.securityfocus.com/bid/18222

www.vupen.com/english/advisories/2006/2108

exchange.xforce.ibmcloud.com/vulnerabilities/27014

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.147

Percentile

95.8%

JSON

Related for CVE-2006-2814