CVE

Id
20350  
CVE No.
CVE-2006-4246  
Status
Candidate  
Description
Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root"s shell instead of the shell of a specified user.  
Phase
Assigned (20060821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
189086 20350 CVE-2006-4246 MISC:http://www.osreviews.net/reviews/admin/usermin  View
189087 20350 CVE-2006-4246 CONFIRM:http://sourceforge.net/tracker/index.php?func=detail&aid=1509145&group_id=17457&atid=485894  View
189088 20350 CVE-2006-4246 CONFIRM:http://www.webmin.com/uchanges.html  View
189089 20350 CVE-2006-4246 DEBIAN:DSA-1177  View
189090 20350 CVE-2006-4246 URL:http://www.debian.org/security/2006/dsa-1177  View
189091 20350 CVE-2006-4246 BID:18574  View
189092 20350 CVE-2006-4246 URL:http://www.securityfocus.com/bid/18574  View
189093 20350 CVE-2006-4246 VUPEN:ADV-2006-3668  View
189094 20350 CVE-2006-4246 URL:http://www.vupen.com/english/advisories/2006/3668  View
189095 20350 CVE-2006-4246 SECUNIA:21968  View
189096 20350 CVE-2006-4246 URL:http://secunia.com/advisories/21968  View
189097 20350 CVE-2006-4246 SECUNIA:21981  View
189098 20350 CVE-2006-4246 URL:http://secunia.com/advisories/21981  View
189099 20350 CVE-2006-4246 XF:usermin-shell-dos(29010)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58841 JVNDB-2006-001107 Debian GNU/Linux の thttpd における任意のファイルを作成される脆弱性 Debian GNU/Linux の thttpd は、任意のファイルを作成または touch される脆弱性が存在します。 CVE-2006-4248 20350 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001107.html  View