Lucene search
HistorySep 09, 2006 - 12:04 a.m.
CVE-2006-4658
panda platinum
internet security
url
manipulation
cve-2006-4658
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns.
Affected configurations
Node
pandapanda_platinum_internet_securityMatch2006_10.02.01
ORpandapanda_platinum_internet_securityMatch2007_11.00.00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Related for CVE-2006-4658