CVE-2006-5571

CVE-2006-5571 is a stack-based buffer overflow in CruiseWorks 1.09c/1.09d, triggered by a long string in the doc parameter of /scripts/cruise/cws.exe. This vulnerability allows remote attackers to execute arbitrary code. The impact is described as remote code execution with partial confidentialit...

CVE-2006-5570

CVE-2006-5570 is a directory traversal vulnerability in CruiseWorks 1.09c/1.09d, exploited via a ../ sequence in the doc parameter to /scripts/cruise/cws.exe, allowing remote read of arbitrary files. The NVD CVSSv2 base score is 5.0 (Medium) with network access, low attack complexity, no authenti...