Lucene search

[email protected]CVE-2006-6454

HistoryDec 10, 2006 - 9:28 p.m.

CVE-2006-6454

2006-12-1021:28:00

[email protected]

web.nvd.nist.gov

cve-2006-6454

j-owamp

web interface

rce

execinbackground.php

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%

JSON

execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the (1) exe and (2) args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

j-owampweb_interfaceRange≤2.1b

CPENameOperatorVersion
j-owamp:web_interfacej-owamp web interfacele2.1b

CPE	Name	Operator	Version
j-owamp:web_interface	j-owamp web interface	le	2.1b

References

www.vupen.com/english/advisories/2006/4905

exchange.xforce.ibmcloud.com/vulnerabilities/30781

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%

JSON

Related for CVE-2006-6454

nvd1 cvelist1