PT-2006-5993 · Asbru+1 · Asbru Website Manager+3

Publicado 2006-10-12 · Atualizado 2011-06-13 · CVE-2006-5258

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Asbru Web Content Management versions prior to 6.1.22 Asbru Web Content Editor versions prior to 6.0.22 Asbru Website Manager versions prior to 6.0.22

Description The issue allows remote attackers to execute arbitrary commands due to a lack of sanitization in an unspecified parameter before invoking Aspell in the spell checking component.

Recommendations For Asbru Web Content Management versions prior to 6.1.22, update to version 6.1.22 or later. For Asbru Web Content Editor versions prior to 6.0.22, update to version 6.0.22 or later. For Asbru Website Manager versions prior to 6.0.22, update to version 6.0.22 or later.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2006-5258

Produtos afetados

Asbru Web Content Editor

Asbru Web Content Management

Asbru Website Manager

Aspell

Referências · 11

• http://vupen.com/english/advisories/2006/4004 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html · Nota
• http://editor.asbrusoft.com/page.php/id=727 · Nota
• http://secunia.com/advisories/22344 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4061 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4060 · Aviso do Fabricante
• http://secunia.com/advisories/22472 · Aviso do Fabricante
• http://secunia.com/advisories/22353 · Nota
• http://wcm.asbrusoft.com/page.php/id=791 · Correção
• http://securityfocus.com/bid/20544 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5258 · Nota de Segurança