Lucene search

[email protected]CVE-2006-5258

HistoryOct 12, 2006 - 10:07 p.m.

CVE-2006-5258

2006-10-1222:07:00

CWE-94

[email protected]

web.nvd.nist.gov

security

cve-2006-5258

asbru web content management

asbru web content editor

asbru website manager

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON

The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked.

Affected configurations

NVD

Node

asbru_softwareasbru_web_content_managementRange≤6.1.20

asbru_softwareasbru_web_content_managementMatch6.0

asbru_softwareasbru_web_content_managementMatch6.0.17

asbru_softwareasbru_web_content_managementMatch6.1

asbru_softwareasbru_web_content_managementMatch6.1.19

asbru_softwareasbru_website_managerMatch6.0.20

CPENameOperatorVersion
asbru_software:asbru_web_content_managementasbru software asbru web content managementle6.1.20
asbru_software:asbru_web_content_managementasbru software asbru web content managementeq6.0
asbru_software:asbru_web_content_managementasbru software asbru web content managementeq6.0.17
asbru_software:asbru_web_content_managementasbru software asbru web content managementeq6.1
asbru_software:asbru_web_content_managementasbru software asbru web content managementeq6.1.19
asbru_software:asbru_website_managerasbru software asbru website managereq6.0.20

CPE	Name	Operator	Version
asbru_software:asbru_web_content_management	asbru software asbru web content management	le	6.1.20
asbru_software:asbru_web_content_management	asbru software asbru web content management	eq	6.0
asbru_software:asbru_web_content_management	asbru software asbru web content management	eq	6.0.17
asbru_software:asbru_web_content_management	asbru software asbru web content management	eq	6.1
asbru_software:asbru_web_content_management	asbru software asbru web content management	eq	6.1.19
asbru_software:asbru_website_manager	asbru software asbru website manager	eq	6.0.20

References

archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html

editor.asbrusoft.com/page.php/id=727

secunia.com/advisories/22344

secunia.com/advisories/22353

secunia.com/advisories/22472

wcm.asbrusoft.com/page.php/id=791

www.securityfocus.com/bid/20544

www.vupen.com/english/advisories/2006/4004

www.vupen.com/english/advisories/2006/4060

www.vupen.com/english/advisories/2006/4061

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON

Related for CVE-2006-5258

nvd1 cvelist1