PT-2006-3138 · Russcom · Network Loginphp

Publicado 2006-05-03 · Atualizado 2018-10-18 · CVE-2006-2159

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Russcom Network Loginphp (affected versions not specified)

Description The issue concerns a CRLF injection vulnerability in the help.php file. This vulnerability allows remote attackers to inject MIME headers and spoof emails by including CRLF sequences in the email address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-2159

Produtos afetados

Network Loginphp

Referências · 6

• http://securityfocus.com/archive/1/432729/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2159 · Nota de Segurança
• http://osvdb.org/25214 · Nota
• http://secunia.com/advisories/19930 · Nota
• http://securityfocus.com/bid/17787 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26250 · Nota