PT-2006-7031 · Agileco · Agilevoice+1

Published 2006-12-10 · Updated 2017-07-29 · CVE-2006-6422

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Agileco AgileBill versions 1.4.x Agileco AgileVoice versions 1.4.x

Description The issue arises from improper handling of certain proxy requests, allowing remote attackers to potentially disable the application. This can be achieved by entering invalid license data on a form, which may involve the modules/core/license.inc.php file.

Recommendations For Agileco AgileBill version 1.4.x, consider restricting access to the modules/core/license.inc.php file until a proper fix is available. For Agileco AgileVoice version 1.4.x, avoid using the form that accepts license data until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-6422

Affected Products

Agilebill

Agilevoice

References · 4

• http://secunia.com/advisories/23223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6422 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30751 · Note
• http://securityfocus.com/bid/21459 · Note