CVE-2006-0522

2006-02-0211:02:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.005

Percentile

77.2%

JSON

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.

Affected configurations

Nvd

Node

symantecsygate_management_serverRange≤4.1_mr_2_build_1417_english

symantecsygate_management_serverMatch3.5_mr_3_build_894_english

symantecsygate_management_serverMatch4.0_mr_1_build_1104_english

symantecsygate_management_serverMatch4.1_ga_build_1258_japanese

symantecsygate_management_serverMatch4.1_mr1_build_1351_chinese

VendorProductVersionCPE
symantecsygate_management_server*cpe:2.3:a:symantec:sygate_management_server:*:*:*:*:*:*:*:*
symantecsygate_management_server3.5_mr_3_build_894_englishcpe:2.3:a:symantec:sygate_management_server:3.5_mr_3_build_894_english:*:*:*:*:*:*:*
symantecsygate_management_server4.0_mr_1_build_1104_englishcpe:2.3:a:symantec:sygate_management_server:4.0_mr_1_build_1104_english:*:*:*:*:*:*:*
symantecsygate_management_server4.1_ga_build_1258_japanesecpe:2.3:a:symantec:sygate_management_server:4.1_ga_build_1258_japanese:*:*:*:*:*:*:*
symantecsygate_management_server4.1_mr1_build_1351_chinesecpe:2.3:a:symantec:sygate_management_server:4.1_mr1_build_1351_chinese:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	sygate_management_server	*	cpe:2.3:a:symantec:sygate_management_server::::::::
symantec	sygate_management_server	3.5_mr_3_build_894_english	cpe:2.3:a:symantec:sygate_management_server:3.5_mr_3_build_894_english:::::::*
symantec	sygate_management_server	4.0_mr_1_build_1104_english	cpe:2.3:a:symantec:sygate_management_server:4.0_mr_1_build_1104_english:::::::*
symantec	sygate_management_server	4.1_ga_build_1258_japanese	cpe:2.3:a:symantec:sygate_management_server:4.1_ga_build_1258_japanese:::::::*
symantec	sygate_management_server	4.1_mr1_build_1351_chinese	cpe:2.3:a:symantec:sygate_management_server:4.1_mr1_build_1351_chinese:::::::*