PT-2006-3103 · Uninett · Network Administration Visualized

Publicado 2006-05-01 · Atualizado 2017-07-20 · CVE-2006-2123

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Network Administration Visualized (NAV) versions prior to 3.0.1

Description The issue concerns SQL injection vulnerabilities in the report interface of NAV. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 3.0.1, update to version 3.0.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-2123

Produtos afetados

Network Administration Visualized

Referências · 7

• http://osvdb.org/25066 · Nota
• http://securityfocus.com/bid/17734 · Correção
• http://secunia.com/advisories/19849 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=413412 · Nota
• http://vupen.com/english/advisories/2006/1572 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2123 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26151 · Nota