Lucene search

[email protected]CVE-2006-5538

HistoryOct 26, 2006 - 5:07 p.m.

CVE-2006-5538

2006-10-2617:07:00

[email protected]

web.nvd.nist.gov

d-link

dsl-g624t

firmware

vulnerability

cve-2006-5538

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%

JSON

D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably a direct request.

Affected configurations

NVD

Node

d-linkdsl-g624tMatch3.00b01t01.ya_c.2006-06-16

CPENameOperatorVersion
d-link:dsl-g624td-link dsl-g624teq3.00b01t01.ya_c.2006-06-16

CPE	Name	Operator	Version
d-link:dsl-g624t	d-link dsl-g624t	eq	3.00b01t01.ya_c.2006-06-16

References

www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html

www.securityfocus.com/archive/1/449486/100/0/threaded

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%

JSON

Related for CVE-2006-5538

nvd1 cvelist1