PT-2006-4042 · Hosting Controller · Hosting Controller

Published 2006-06-22 · Updated 2017-07-20 · CVE-2006-3147

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hosting Controller versions prior to 6.1 (aka Hotfix 3.2)

Description The issue allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 6.1 (aka Hotfix 3.2), update to version 6.1 (aka Hotfix 3.2) or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive reseller information and passwords until the update is applied.

Exploit

Fix

Related Identifiers

CVE-2006-3147

Affected Products

Hosting Controller

References · 9

• 🔥 https://exploit-db.com/exploits/1987 · Exploit
• http://secunia.com/advisories/20743 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3147 · Security Note
• http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.html · Patch
• http://securityfocus.com/bid/18565 · Note
• http://osvdb.org/26693 · Note
• http://securitytracker.com/id?1016444 · Note
• http://vupen.com/english/advisories/2006/2459 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27340 · Note