PT-2006-7198 · Hyperaccess+1 · Hyperaccess+1

Brett Moore · Publicado 2006-12-15 · Atualizado 2018-10-17 · CVE-2006-6596

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HyperAccess version 8.4

Description The issue allows remote attackers to execute arbitrary vbscript and commands via a session file, which can be automatically opened using Internet Explorer.

Recommendations For HyperAccess version 8.4, consider disabling the automatic opening of session files in Internet Explorer as a temporary workaround until a patch is available. Restrict access to .HAW files to minimize the risk of exploitation. Avoid using Internet Explorer to open untrusted session files until the issue is resolved.

Correção

Identificadores relacionados

CVE-2006-6596

Produtos afetados

Hyperaccess

Internet Explorer

Referências · 6

• http://securityfocus.com/archive/1/454388/100/0/threaded · Nota
• http://securityfocus.com/bid/21594 · Nota
• http://vupen.com/english/advisories/2006/5013 · Nota
• http://securityreason.com/securityalert/2045 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6596 · Nota de Segurança
• http://secunia.com/advisories/23366 · Nota