mono vulnerability

2006-12-2000:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.08 Low

EPSS

Percentile

94.3%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06

Details

Jose Ramon Palanco discovered that the mono System.Web class did not
consistently verify local file paths. As a result, the source code for
mono web applications could be retrieved remotely, possibly leading to
further compromise via the application’s source.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibmono-system-web2.0-cil< 1.1.17.1-1ubuntu7.1UNKNOWN
Ubuntu6.10noarchlibmono-system-web1.0-cil< 1.1.17.1-1ubuntu7.1UNKNOWN
Ubuntu6.06noarchmono-classlib-2.0< 1.1.13.6-0ubuntu3.2UNKNOWN
Ubuntu6.06noarchmono-classlib-1.0< 1.1.13.6-0ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	libmono-system-web2.0-cil	< 1.1.17.1-1ubuntu7.1	UNKNOWN
Ubuntu	6.10	noarch	libmono-system-web1.0-cil	< 1.1.17.1-1ubuntu7.1	UNKNOWN
Ubuntu	6.06	noarch	mono-classlib-2.0	< 1.1.13.6-0ubuntu3.2	UNKNOWN
Ubuntu	6.06	noarch	mono-classlib-1.0	< 1.1.13.6-0ubuntu3.2	UNKNOWN