Lucene search

[email protected]CVE-2006-3766

HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3766

2006-07-2114:03:00

[email protected]

web.nvd.nist.gov

cve-2006-3766

osdate

script archive

security vulnerability

rating manipulation

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

Darren’s $5 Script Archive osDate 1.1.7 and earlier allows users to boost their own ratings via a txtrating parameter with a score greater than the intended maximum of 10.

Affected configurations

NVD

Node

darrens_5-dollar_script_archiveosdateRange≤1.1.7

darrens_5-dollar_script_archiveosdateMatch1.1.5

darrens_5-dollar_script_archiveosdateMatch1.1.6

CPENameOperatorVersion
darrens_5-dollar_script_archive:osdatedarrens 5-dollar script archive osdatele1.1.7
darrens_5-dollar_script_archive:osdatedarrens 5-dollar script archive osdateeq1.1.5
darrens_5-dollar_script_archive:osdatedarrens 5-dollar script archive osdateeq1.1.6

CPE	Name	Operator	Version
darrens_5-dollar_script_archive:osdate	darrens 5-dollar script archive osdate	le	1.1.7
darrens_5-dollar_script_archive:osdate	darrens 5-dollar script archive osdate	eq	1.1.5
darrens_5-dollar_script_archive:osdate	darrens 5-dollar script archive osdate	eq	1.1.6

References

securitytracker.com/id?1016700

www.securityfocus.com/archive/1/440490/100/0/threaded

www.securityfocus.com/archive/1/440592/100/0/threaded

www.securityfocus.com/archive/1/443198/100/200/threaded

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for CVE-2006-3766

nvd1 cvelist1