PT-2006-7114 · Provisio · Sitekiosk

Publicado 2006-12-14 · Atualizado 2018-10-17 · CVE-2006-6510

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SiteKiosk versions prior to 6.5.150

Description The issue allows local users to bypass security protections and read arbitrary files via certain functions due to an unspecified ActiveX control being installed "safe for scripting".

Recommendations For versions prior to 6.5.150, update to version 6.5.150 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected ActiveX control until a patch is available.

Correção

Identificadores relacionados

CVE-2006-6510

Produtos afetados

Sitekiosk

Referências · 7

• http://sitekiosk.com/th_support/versions/index.php3?id=39 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-6510 · Nota de Segurança
• http://vupen.com/english/advisories/2006/4985 · Nota
• http://securityfocus.com/archive/1/454185/100/0/threaded · Nota
• http://securityfocus.com/bid/21567 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30878 · Nota
• http://secunia.com/advisories/23253 · Nota