CVE

Id
18423  
CVE No.
CVE-2006-2319  
Status
Candidate  
Description
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename.  
Phase
Assigned (20060511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
159988 18423 CVE-2006-2319 BUGTRAQ:20060508 Multiple Vulnerabilities In IdealBB ASP Bulletin Board  View
159989 18423 CVE-2006-2319 URL:http://www.securityfocus.com/archive/1/archive/1/433248/100/0/threaded  View
159990 18423 CVE-2006-2319 FULLDISC:20060508 Multiple Vulnerabilities In IdealBB ASP Bulletin Board  View
159991 18423 CVE-2006-2319 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html  View
159992 18423 CVE-2006-2319 MISC:http://www.idealscience.com/ibb/posts.aspx?postID=24415  View
159993 18423 CVE-2006-2319 BID:17920  View
159994 18423 CVE-2006-2319 URL:http://www.securityfocus.com/bid/17920  View
159995 18423 CVE-2006-2319 VUPEN:ADV-2006-1729  View
159996 18423 CVE-2006-2319 URL:http://www.vupen.com/english/advisories/2006/1729  View
159997 18423 CVE-2006-2319 OSVDB:25456  View
159998 18423 CVE-2006-2319 URL:http://www.osvdb.org/25456  View
159999 18423 CVE-2006-2319 SECUNIA:20035  View
160000 18423 CVE-2006-2319 URL:http://secunia.com/advisories/20035  View
160001 18423 CVE-2006-2319 SREASON:871  View
160002 18423 CVE-2006-2319 URL:http://securityreason.com/securityalert/871  View
160003 18423 CVE-2006-2319 XF:idealbb-asp-file-upload(26353)  View

Related JVN