PT-2006-1021 · Debian · Lurker

Published 2006-03-07 · Updated 2017-07-20 · CVE-2006-1064

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Lurker versions 2.0 and earlier

Description: The issue concerns multiple vulnerabilities in the Lurker package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality of protected information. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting (XSS) attacks.

Recommendations: For Lurker versions 2.0 and earlier, consider disabling the vulnerable components until a patch is available. Restrict access to the Lurker package to minimize the risk of exploitation. Avoid using the Lurker package in sensitive operations until the issue is resolved.

Fix

Related Identifiers

BDU:2015-03288

CVE-2006-1064

DSA-999-1

Affected Products

Lurker

References · 18

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1064 · Security Note
• http://secunia.com/advisories/19136 · Vendor Advisory
• http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1062 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1064 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1063 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2006-1064 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168 · Patch
• https://bdu.fstec.ru/vul/2015-03288 · Security Note
• https://osv.dev/vulnerability/CVE-2006-1064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1064 · Security Note
• http://debian.org/security/2006/dsa-999 · Vendor Advisory
• http://securityfocus.com/bid/17003 · Note
• http://secunia.com/advisories/19145 · Note
• http://debian.org/security/dsa-999 · Note