PT-2006-4848 · Henrik Storner · Hobbit

Publicado 2006-08-07 · Atualizado 2018-10-17 · CVE-2006-4003

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Henrik Storner Hobbit monitor versions prior to 4.1.2p2

Description The issue allows remote attackers to obtain sensitive information by accessing files outside of the intended configuration directory via requests to the hobbitd daemon on port 1984/tcp.

Recommendations For versions prior to 4.1.2p2, update to version 4.1.2p2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-4003

Produtos afetados

Hobbit

Referências · 7

• http://securityfocus.com/archive/1/442036/100/0/threaded · Nota
• http://secunia.com/advisories/21317 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28204 · Nota
• http://securityfocus.com/bid/19317 · Correção
• http://vupen.com/english/advisories/2006/3139 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=436594&group_id=128058 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-4003 · Nota de Segurança