PT-2006-4848 · Henrik Storner · Hobbit

Published 2006-08-07 · Updated 2018-10-17 · CVE-2006-4003

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Henrik Storner Hobbit monitor versions prior to 4.1.2p2

Description The issue allows remote attackers to obtain sensitive information by accessing files outside of the intended configuration directory via requests to the hobbitd daemon on port 1984/tcp.

Recommendations For versions prior to 4.1.2p2, update to version 4.1.2p2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-4003

Affected Products

Hobbit

References · 7

• http://secunia.com/advisories/21317 · Vendor Advisory
• http://securityfocus.com/bid/19317 · Patch
• http://sourceforge.net/project/shownotes.php?release_id=436594&group_id=128058 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-4003 · Security Note
• http://securityfocus.com/archive/1/442036/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28204 · Note
• http://vupen.com/english/advisories/2006/3139 · Note