PT-2006-2031 · 3Com · 3Com Tippingpoint Sms Server

Micheal Cottingham · Published 2006-05-10 · Updated 2018-10-18 · CVE-2006-0993

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions 3Com TippingPoint SMS Server versions prior to 2.2.1.4478

Description The issue concerns the web management interface, which fails to restrict access to certain directories. This could allow remote attackers to obtain potentially sensitive information, including configuration settings.

Recommendations For versions prior to 2.2.1.4478, update to version 2.2.1.4478 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-0993

Affected Products

3Com Tippingpoint Sms Server

References · 11

• http://zerodayinitiative.com/advisories/ZDI-06-013.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0993 · Security Note
• http://secunia.com/advisories/20058 · Note
• http://osvdb.org/25360 · Note
• http://securityfocus.com/bid/17935 · Note
• http://vupen.com/english/advisories/2006/1752 · Note
• http://3com.com/securityalert/alerts/3COM-06-002.html · Note
• http://securityreason.com/securityalert/870 · Note
• http://securitytracker.com/id?1016051 · Note
• http://securityfocus.com/archive/1/433432/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26338 · Note