PT-2006-3103 · Uninett · Network Administration Visualized

Published 2006-05-01 · Updated 2017-07-20 · CVE-2006-2123

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Network Administration Visualized (NAV) versions prior to 3.0.1

Description The issue concerns SQL injection vulnerabilities in the report interface of NAV. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 3.0.1, update to version 3.0.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-2123

Affected Products

Network Administration Visualized

References · 7

• http://securityfocus.com/bid/17734 · Patch
• http://secunia.com/advisories/19849 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2123 · Security Note
• http://osvdb.org/25066 · Note
• http://sourceforge.net/project/shownotes.php?release_id=413412 · Note
• http://vupen.com/english/advisories/2006/1572 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26151 · Note