PT-2006-4042 · Hosting Controller · Hosting Controller

Publicado 2006-06-22 · Atualizado 2017-07-20 · CVE-2006-3147

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hosting Controller versions prior to 6.1 (aka Hotfix 3.2)

Description The issue allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 6.1 (aka Hotfix 3.2), update to version 6.1 (aka Hotfix 3.2) or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive reseller information and passwords until the update is applied.

Exploit

Correção

Identificadores relacionados

CVE-2006-3147

Produtos afetados

Hosting Controller

Referências · 9

• 🔥 https://exploit-db.com/exploits/1987 · Exploit
• http://secunia.com/advisories/20743 · Aviso do Fabricante
• http://securityfocus.com/bid/18565 · Nota
• http://osvdb.org/26693 · Nota
• http://securitytracker.com/id?1016444 · Nota
• http://vupen.com/english/advisories/2006/2459 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27340 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3147 · Nota de Segurança
• http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.html · Correção