Lucene search

[email protected]CVE-2006-4140

HistoryAug 14, 2006 - 11:04 p.m.

CVE-2006-4140

2006-08-1423:04:00

[email protected]

web.nvd.nist.gov

cve

2006

4140

directory traversal

ipcheck server monitor

vulnerability

remote attackers

arbitrary files

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.034 Low

EPSS

Percentile

91.5%

JSON

Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified … (dot dot) sequences in the URL, including (1) “…%2f” (encoded “/” slash), “…/” (multiple dot), and “…%255c…/” (double-encoded "" backslash).

Affected configurations

NVD

Node

ipcheckserver_monitorMatch4.3.1.368

ipcheckserver_monitorMatch4.3.1.382

ipcheckserver_monitorMatch4.4.1.521

ipcheckserver_monitorMatch4.4.1.522

ipcheckserver_monitorMatch5.0.1.272

ipcheckserver_monitorMatch5.0.1.299

ipcheckserver_monitorMatch5.0.1.309

ipcheckserver_monitorMatch5.0.1.321

ipcheckserver_monitorMatch5.1.0.341

ipcheckserver_monitorMatch5.1.0.342

ipcheckserver_monitorMatch5.1.0.345

ipcheckserver_monitorMatch5.2.0.404

ipcheckserver_monitorMatch5.2.0.405

ipcheckserver_monitorMatch5.2.0.418

ipcheckserver_monitorMatch5.2.0.420

ipcheckserver_monitorMatch5.2.2.449

ipcheckserver_monitorMatch5.2.2.451

ipcheckserver_monitorMatch5.3.0.506

ipcheckserver_monitorMatch5.3.0.507

ipcheckserver_monitorMatch5.3.0.508

ipcheckserver_monitorMatch5.3.0.509

ipcheckserver_monitorMatch5.3.1.574

ipcheckserver_monitorMatch5.3.1.575

ipcheckserver_monitorMatch5.3.1.578

ipcheckserver_monitorMatch5.3.1.579

ipcheckserver_monitorMatch5.3.1.580

ipcheckserver_monitorMatch5.3.1.581

ipcheckserver_monitorMatch5.3.1.586

ipcheckserver_monitorMatch5.3.1.587

ipcheckserver_monitorMatch5.3.2.605

ipcheckserver_monitorMatch5.3.2.606

ipcheckserver_monitorMatch5.3.2.609

ipcheckserver_monitorMatch5.3.2.610

ipcheckserver_monitorMatch5.3.2.616

ipcheckserver_monitorMatch5.3.2.617

CPENameOperatorVersion
ipcheck:server_monitoripcheck server monitoreq4.3.1.368
ipcheck:server_monitoripcheck server monitoreq4.3.1.382
ipcheck:server_monitoripcheck server monitoreq4.4.1.521
ipcheck:server_monitoripcheck server monitoreq4.4.1.522
ipcheck:server_monitoripcheck server monitoreq5.0.1.272
ipcheck:server_monitoripcheck server monitoreq5.0.1.299
ipcheck:server_monitoripcheck server monitoreq5.0.1.309
ipcheck:server_monitoripcheck server monitoreq5.0.1.321
ipcheck:server_monitoripcheck server monitoreq5.1.0.341
ipcheck:server_monitoripcheck server monitoreq5.1.0.342

CPE	Name	Operator	Version
ipcheck:server_monitor	ipcheck server monitor	eq	4.3.1.368
ipcheck:server_monitor	ipcheck server monitor	eq	4.3.1.382
ipcheck:server_monitor	ipcheck server monitor	eq	4.4.1.521
ipcheck:server_monitor	ipcheck server monitor	eq	4.4.1.522
ipcheck:server_monitor	ipcheck server monitor	eq	5.0.1.272
ipcheck:server_monitor	ipcheck server monitor	eq	5.0.1.299
ipcheck:server_monitor	ipcheck server monitor	eq	5.0.1.309
ipcheck:server_monitor	ipcheck server monitor	eq	5.0.1.321
ipcheck:server_monitor	ipcheck server monitor	eq	5.1.0.341
ipcheck:server_monitor	ipcheck server monitor	eq	5.1.0.342

Rows per page:

1-10 of 351

References

secunia.com/advisories/21468

securityreason.com/securityalert/1389

securitytracker.com/id?1016676

www.paessler.com/forum/viewtopic.php?p=4047&sid=f8c0f03a69d9498338797c6ea3cc6733

www.paessler.com/ipcheck/history

www.securityfocus.com/archive/1/442822/100/0/threaded

www.securityfocus.com/archive/1/444227/100/0/threaded

www.securityfocus.com/bid/19473

www.vupen.com/english/advisories/2006/3259

exchange.xforce.ibmcloud.com/vulnerabilities/28341

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.034 Low

EPSS

Percentile

91.5%

JSON

Related for CVE-2006-4140

cvelist1 nessus1 nvd1