ID CVE-2006-5406
Type cve
Reporter cve@mitre.org
Modified 2017-07-20T01:33:00
Description
Passgo Defender 5.2 creates the application directory with insecure permissions (Everyone/Full Control), which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
{"id": "CVE-2006-5406", "bulletinFamily": "NVD", "title": "CVE-2006-5406", "description": "Passgo Defender 5.2 creates the application directory with insecure permissions (Everyone/Full Control), which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information.", "published": "2006-10-19T01:07:00", "modified": "2017-07-20T01:33:00", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-5406", "reporter": "cve@mitre.org", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/29657", "http://www.securityfocus.com/bid/20600", "http://www.vupen.com/english/advisories/2006/4091", "http://secunia.com/advisories/22271", "http://www.osvdb.org/29789"], "cvelist": ["CVE-2006-5406"], "type": "cve", "lastseen": "2019-05-29T18:08:34", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "61aec2916643114b4d8a2c798c5428e6"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "81c96b7afdf61aa1c651d5ae642e0794"}, {"key": "cpe23", "hash": "81cc7fc6a3f9774916a0f0915f892e6c"}, {"key": "cvelist", "hash": "52650cd016be118b3bdbbd29dd8e490d"}, {"key": "cvss", "hash": "e7a9f43a876409a7fe68a76ca567e159"}, {"key": "cvss2", "hash": "5e1dcf1a092b8c1a2f55f0815836db32"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "78a7a5cbaf09985c14389298e454e7db"}, {"key": "description", "hash": "dc786016459b8c1dd03b5ba385af1642"}, {"key": "href", "hash": "064f3cb028ba29004d45ade8ed3b8057"}, {"key": "modified", "hash": "0fdb701905e0138e4bc209297c27fd37"}, {"key": "published", "hash": "a17d5bb882e9d28c6ea9c541ceb0566a"}, {"key": "references", "hash": "86604388e7771e820d05b07eab338427"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "4676597a3288a87237323bd62c059306"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "061a2df49af1893ea453202cfa3ae29c4c782b1ba75aebc0196f3d6ae39f4431", "viewCount": 0, "enchantments": {"score": {"value": 3.6, "vector": "NONE", "modified": "2019-05-29T18:08:34"}, "dependencies": {"references": [{"type": "osvdb", "idList": ["OSVDB:29789"]}], "modified": "2019-05-29T18:08:34"}, "vulnersScore": 3.6}, "objectVersion": "1.3", "cpe": ["cpe:/a:passgo:defender:5.2"], "affectedSoftware": [{"name": "passgo defender", "operator": "eq", "version": "5.2"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 3.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "LOW", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:passgo:defender:5.2:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-Other"]}
{"osvdb": [{"lastseen": "2017-04-28T13:20:26", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\nVendor URL: http://www.passgo.com/products/defender/index.shtml\n[Secunia Advisory ID:22271](https://secuniaresearch.flexerasoftware.com/advisories/22271/)\nISS X-Force ID: 29657\nFrSIRT Advisory: ADV-2006-4091\n[CVE-2006-5406](https://vulners.com/cve/CVE-2006-5406)\nBugtraq ID: 20600\n", "modified": "2006-10-18T09:18:46", "published": "2006-10-18T09:18:46", "href": "https://vulners.com/osvdb/OSVDB:29789", "id": "OSVDB:29789", "title": "PassGo Defender Installation Permission Weakness", "type": "osvdb", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}}]}