Lucene search
HistoryJul 21, 2006 - 2:03 p.m.
CVE-2006-3753
cve-2006-3753
setcookie.php
administration login
professional home page tools
guestbook
vulnerability
brute force
password guessing
hash
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.3%
setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash.
Affected configurations
Node
professional_home_page_toolsprofessional_home_page_tools_guestbook
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.3%
Related for CVE-2006-3753