PT-2006-1738 · Vhcs · Virtual Hosting Control System

Román Medina-Heigl Hernández + 1 · Published 2006-02-15 · Updated 2018-10-19 · CVE-2006-0684

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Virtual Hosting Control System (VHCS) versions 2.4.7.1 and earlier

Description The issue allows remote attackers to gain unauthorized access due to the lack of verification of the old password when a user changes their password.

Recommendations For Virtual Hosting Control System (VHCS) versions 2.4.7.1 and earlier, update to a version that verifies the old password during the password change process to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2006-0684

Affected Products

Virtual Hosting Control System

References · 8

• 🔥 https://exploit-db.com/exploits/27204 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0684 · Security Note
• http://secunia.com/advisories/18799 · Vendor Advisory
• http://rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt · Vendor Advisory
• http://vupen.com/english/advisories/2006/0534 · Note
• http://securityfocus.com/archive/1/424816/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24665 · Note
• http://securityfocus.com/bid/16600 · Note