PT-2006-1021 · Debian · Lurker

Publicado 2006-03-07 · Atualizado 2017-07-20 · CVE-2006-1064

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Lurker versions 2.0 and earlier

Description: The issue concerns multiple vulnerabilities in the Lurker package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality of protected information. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting (XSS) attacks.

Recommendations: For Lurker versions 2.0 and earlier, consider disabling the vulnerable components until a patch is available. Restrict access to the Lurker package to minimize the risk of exploitation. Avoid using the Lurker package in sensitive operations until the issue is resolved.

Correção

Identificadores relacionados

BDU:2015-03288

CVE-2006-1064

DSA-999-1

Produtos afetados

Lurker

Referências · 18

• http://securityfocus.com/bid/17003 · Nota
• http://secunia.com/advisories/19145 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1064 · Nota de Segurança
• http://secunia.com/advisories/19136 · Aviso do Fabricante
• http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1062 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1064 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1063 · Nota de Segurança
• http://debian.org/security/dsa-999 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25154 · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-1064 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168 · Correção
• https://bdu.fstec.ru/vul/2015-03288 · Nota de Segurança
• http://vupen.com/english/advisories/2006/0850 · Nota
• http://osvdb.org/23696 · Nota