PT-2006-1738 · Vhcs · Virtual Hosting Control System

Román Medina-Heigl Hernández + 1 · Publicado 2006-02-15 · Atualizado 2018-10-19 · CVE-2006-0684

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Virtual Hosting Control System (VHCS) versions 2.4.7.1 and earlier

Description The issue allows remote attackers to gain unauthorized access due to the lack of verification of the old password when a user changes their password.

Recommendations For Virtual Hosting Control System (VHCS) versions 2.4.7.1 and earlier, update to a version that verifies the old password during the password change process to prevent unauthorized access.

Exploit

Correção

Identificadores relacionados

CVE-2006-0684

Produtos afetados

Virtual Hosting Control System

Referências · 8

• 🔥 https://exploit-db.com/exploits/27204 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0684 · Nota de Segurança
• http://secunia.com/advisories/18799 · Aviso do Fabricante
• http://rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0534 · Nota
• http://securityfocus.com/archive/1/424816/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24665 · Nota
• http://securityfocus.com/bid/16600 · Nota