PT-2006-6989 · Unknown · Btsavemysql

Sn0Opy · Published 2006-12-07 · Updated 2018-10-17 · CVE-2006-6378

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BTSaveMySql version 1.2

Description The issue allows remote attackers to obtain configuration and save files via direct requests due to insufficient access control of sensitive data stored under the web root.

Recommendations For BTSaveMySql version 1.2, consider restricting access to sensitive data stored under the web root to minimize the risk of exploitation. As a temporary workaround, limit direct requests to configuration and save files until a proper fix is applied.

Fix

Related Identifiers

CVE-2006-6378

Affected Products

Btsavemysql

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-6378 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30760 · Note
• http://securityfocus.com/archive/1/453652/100/0/threaded · Note
• http://securityreason.com/securityalert/2002 · Note