PT-2006-1907 · Michael Salzer · Guestbox

L0Om · Publicado 2006-02-23 · Atualizado 2018-10-19 · CVE-2006-0861

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Michael Salzer Guestbox versions 0.6 through 0.7

Description The issue allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to "/gb/gblog".

Recommendations For versions 0.6 through 0.7, update to version 0.8 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2006-0861

Produtos afetados

Guestbox

Referências · 8

• http://securityfocus.com/archive/1/426663/100/0/threaded · Nota
• http://securityfocus.com/archive/1/425495/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24799 · Nota
• http://secunia.com/advisories/18946 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0861 · Nota de Segurança
• http://osvdb.org/23376 · Correção
• http://vupen.com/english/advisories/2006/0675 · Aviso do Fabricante
• http://securityreason.com/securityalert/460 · Nota