PT-2006-2682 · Squery · Osquery

Codexploder · Published 2006-04-10 · Updated 2024-02-14 · CVE-2006-1688

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SQuery versions 4.5 and earlier

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter to scripts in the lib directory, including multiple PHP files such as ase.php, devi.php, doom3.php, and others. This issue only occurs when register globals is disabled.

Recommendations: For SQuery versions 4.5 and earlier, consider disabling the libpath parameter or restricting access to the lib directory to minimize the risk of exploitation. Additionally, ensure that register globals is enabled to prevent this issue, but be aware of the potential security implications of this setting.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-1688

Affected Products

Osquery

References · 42

• 🔥 http://osvdb.org/24407 · Exploit
• 🔥 http://liz0zim.no-ip.org/alp.txt · Exploit
• 🔥 http://securityfocus.com/bid/17434 · Exploit
• 🔥 https://exploit-db.com/exploits/1629 · Exploit
• 🔥 http://securitytracker.com/id?1015884 · Exploit
• 🔥 http://blogcu.com/Liz0ziM/431845 · Exploit
• http://vupen.com/english/advisories/2006/1284 · Vendor Advisory
• http://secunia.com/advisories/19482 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1688 · Security Note
• http://secunia.com/advisories/19588 · Vendor Advisory
• http://osvdb.org/24403 · Note
• http://osvdb.org/24420 · Note
• http://osvdb.org/24405 · Note
• http://osvdb.org/24425 · Note
• http://osvdb.org/24426 · Note