CVE

Id
19940  
CVE No.
CVE-2006-3836  
Status
Candidate  
Description
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter.  
Phase
Assigned (20060724)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
183815 19940 CVE-2006-3836 BUGTRAQ:20060720 Unidomedia Chameleon LE/Pro Directory Traversal  View
183816 19940 CVE-2006-3836 URL:http://www.securityfocus.com/archive/1/archive/1/440765/100/0/threaded  View
183817 19940 CVE-2006-3836 BID:19107  View
183818 19940 CVE-2006-3836 URL:http://www.securityfocus.com/bid/19107  View
183819 19940 CVE-2006-3836 VUPEN:ADV-2006-2948  View
183820 19940 CVE-2006-3836 URL:http://www.vupen.com/english/advisories/2006/2948  View
183821 19940 CVE-2006-3836 SECUNIA:21156  View
183822 19940 CVE-2006-3836 URL:http://secunia.com/advisories/21156  View
183823 19940 CVE-2006-3836 SREASON:1280  View
183824 19940 CVE-2006-3836 URL:http://securityreason.com/securityalert/1280  View
183825 19940 CVE-2006-3836 XF:chameleon-index-directory-traversal(27898)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60639 JVNDB-2006-002905 eIQnetworks ESA におけるスタックベースのバッファオーバーフローの脆弱性 以下の製品で使用される eIQnetworks Enterprise Security Analyzer (ESA) は、Syslog デーモン (syslogserver.exe) に関する処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-3838 19940 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002905.html  View