Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-6965HistoryJan 29, 2007 - 5:28 p.m.
CVE-2006-6965
2007-01-2917:28:00
Debian Security Bug Tracker
security-tracker.debian.org
6
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
82.0%
CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the media parameter. NOTE: this issue can be leveraged for XSS attacks.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | dokuwiki | < 0.0.20061106-1 | dokuwiki_0.0.20061106-1_all.deb |
| Debian | 11 | all | dokuwiki | < 0.0.20061106-1 | dokuwiki_0.0.20061106-1_all.deb |
| Debian | 10 | all | dokuwiki | < 0.0.20061106-1 | dokuwiki_0.0.20061106-1_all.deb |
| Debian | 999 | all | dokuwiki | < 0.0.20061106-1 | dokuwiki_0.0.20061106-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2006-6965
2007-01-29 00:00:00
cve
cve
CVE-2006-6965
2007-01-29 17:28:00
openvas
openvas
Gentoo Security Advisory GLSA 200704-08 (dokuwiki)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200704-08 (dokuwiki)
2008-09-24 00:00:00
nessus
nessus
GLSA-200704-08 : DokuWiki: XSS vulnerability
2007-04-19 00:00:00
gentoo
gentoo
DokuWiki: Cross-site scripting vulnerability
2007-04-12 00:00:00
securityvulns
securityvulns
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
82.0%
Related for DEBIANCVE:CVE-2006-6965