5

CVE-2006-4899

Exploit
The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Etrust Security Command Center Version 8 Update sp1 Edition cr1
Broadcom ≫ Etrust Security Command Center Version 8 Update sp1 Edition cr2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.49% 0.954
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/22023
Patch
Vendor Advisory
Exploit
http://securitytracker.com/id?1016910
http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt
Patch
Vendor Advisory
Exploit
http://www.osvdb.org/29009
http://www.securityfocus.com/archive/1/446611/100/0/threaded
http://www.securityfocus.com/archive/1/446716/100/0/threaded
http://www.securityfocus.com/bid/20139
http://www.vupen.com/english/advisories/2006/3738
http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616
https://exchange.xforce.ibmcloud.com/vulnerabilities/29102