CVE

Id
17384  
CVE No.
CVE-2006-1280  
Status
Candidate  
Description
CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db_file, which allows local users to obtain privileged information, such as session keys, by viewing the files.  
Phase
Assigned (20060318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
143682 17384 CVE-2006-1280 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356555  View
143683 17384 CVE-2006-1280 BID:17099  View
143684 17384 CVE-2006-1280 URL:http://www.securityfocus.com/bid/17099  View
143685 17384 CVE-2006-1280 VUPEN:ADV-2006-0946  View
143686 17384 CVE-2006-1280 URL:http://www.vupen.com/english/advisories/2006/0946  View
143687 17384 CVE-2006-1280 OSVDB:23866  View
143688 17384 CVE-2006-1280 URL:http://www.osvdb.org/23866  View
143689 17384 CVE-2006-1280 OSVDB:23867  View
143690 17384 CVE-2006-1280 URL:http://www.osvdb.org/23867  View
143691 17384 CVE-2006-1280 SECUNIA:19211  View
143692 17384 CVE-2006-1280 URL:http://secunia.com/advisories/19211  View
143693 17384 CVE-2006-1280 XF:cgisession-driver-files-insecure-permissions(25283)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61654 JVNDB-2006-003920 MyBulletinBoard における CRLF インジェクションの脆弱性 MyBulletinBoard (MyBB) には、CRLF インジェクションの脆弱性が存在します。 CVE-2006-1282 17384 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003920.html  View