PT-2006-3605 · Basic Analysis Security Engine · Base

Str0Ke · Published 2006-05-31 · Updated 2017-10-19 · CVE-2006-2685

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Basic Analysis and Security Engine (BASE) versions 1.2.4 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This can be achieved by providing a URL in the BASE path parameter to specific API endpoints, such as "base qry common.php", "base stat common.php", and "includes/base include.inc.php".

Recommendations For versions 1.2.4 and earlier, disable the register globals setting to prevent exploitation. Additionally, consider restricting access to the vulnerable API endpoints until a fix is available. As a temporary workaround, avoid using the BASE path parameter in the affected endpoints.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-2685

Affected Products

Base

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/base_qry_common.rb · Exploit
• 🔥 https://exploit-db.com/exploits/9908 · Exploit
• 🔥 https://exploit-db.com/exploits/16897 · Exploit
• 🔥 https://exploit-db.com/exploits/1823 · Exploit
• 🔥 http://secunia.com/advisories/20300 · Exploit
• http://securityfocus.com/bid/18298 · Patch
• http://vupen.com/english/advisories/2006/1996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2685 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26652 · Note
• http://sourceforge.net/forum/forum.php?forum_id=577228 · Note
• http://osvdb.org/25770 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370576 · Note