PT-2006-2199 · Adobe · Document Server+2

Tan Chew Keong · Published 2006-03-16 · Updated 2018-10-18 · CVE-2006-1182

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adobe Graphics Server versions 2.0 through 2.1 Adobe Document Server versions 5.0 through 6.0

Description The issue allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service. This can be achieved by using specific commands such as saveContent, saveOptimized, or loadContent in the request.

Recommendations For Adobe Graphics Server versions 2.0 through 2.1, consider restricting access to the AlterCast web service until a fix is available. For Adobe Document Server versions 5.0 through 6.0, avoid using the saveContent, saveOptimized, or loadContent commands in the SOAP request until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-1182

Affected Products

Document Server

Graphics Server

Altercast Web Service

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2006-1182 · Security Note
• http://secunia.com/advisories/19229 · Vendor Advisory
• http://securityfocus.com/bid/17113 · Patch
• http://adobe.com/support/techdocs/332989.html · Patch
• http://securitytracker.com/id?1015769 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0956 · Note
• http://securityreason.com/securityalert/588 · Note
• http://securitytracker.com/id?1015768 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25247 · Note
• http://securityfocus.com/archive/1/427730/100/0/threaded · Note
• http://osvdb.org/23924 · Note