PT-2006-1024 · Debian · Netrisk

Published 2006-12-21 · Updated 2011-03-08 · CVE-2006-6678

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Netrik versions 1.15.4 and earlier

Description: The issue concerns the edit textarea function in form-file.c, which does not properly verify temporary filenames when editing textarea fields. This allows attackers to execute arbitrary commands via shell metacharacters in the filename. Multiple vulnerabilities in the Netrik package of the Debian GNU/Linux operating system can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information.

Recommendations: For Netrik versions 1.15.4 and earlier, as a temporary workaround, consider disabling the edit textarea function in form-file.c until a patch is available. Restrict access to the form-file.c module to minimize the risk of exploitation. Avoid using the edit textarea function when editing textarea fields until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03292

CVE-2006-6678

DSA-1251-1

Affected Products

Netrisk

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2006-6678 · Security Note
• https://osv.dev/vulnerability/CVE-2006-6678 · Vendor Advisory
• http://debian.org/security/2007/dsa-1251 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03292 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6678 · Security Note
• http://sourceforge.net/project/shownotes.php?release_id=472131&group_id=23183 · Patch
• https://security-tracker.debian.org/tracker/CVE-2006-6678 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-6678 · Vendor Advisory
• http://debian.org/security/dsa-1251 · Note
• http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3&r2=1.4 · Note
• http://secunia.com/advisories/23822 · Note
• http://securityfocus.com/bid/22158 · Note
• http://vupen.com/english/advisories/2006/5092 · Note