CVE

Id
20475  
CVE No.
CVE-2006-4371  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated global administrators to read arbitrary files via a .. (dot dot) in the file parameter to (1) logfile_view.wdm and (2) configfile_view.wdm.  
Phase
Assigned (20060825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
191917 20475 CVE-2006-4371 BUGTRAQ:20060821 TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities  View
191918 20475 CVE-2006-4371 URL:http://www.securityfocus.com/archive/1/archive/1/444012/100/0/threaded  View
191919 20475 CVE-2006-4371 FULLDISC:20060821 TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities  View
191920 20475 CVE-2006-4371 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html  View
191921 20475 CVE-2006-4371 CONFIRM:http://files.altn.com/WebAdmin/Release/RelNotes_en.txt  View
191922 20475 CVE-2006-4371 BID:19620  View
191923 20475 CVE-2006-4371 URL:http://www.securityfocus.com/bid/19620  View
191924 20475 CVE-2006-4371 VUPEN:ADV-2006-3333  View
191925 20475 CVE-2006-4371 URL:http://www.vupen.com/english/advisories/2006/3333  View
191926 20475 CVE-2006-4371 OSVDB:28122  View
191927 20475 CVE-2006-4371 URL:http://www.osvdb.org/28122  View
191928 20475 CVE-2006-4371 OSVDB:28123  View
191929 20475 CVE-2006-4371 URL:http://www.osvdb.org/28123  View
191930 20475 CVE-2006-4371 SECUNIA:21558  View
191931 20475 CVE-2006-4371 URL:http://secunia.com/advisories/21558  View
191932 20475 CVE-2006-4371 SREASON:1455  View
191933 20475 CVE-2006-4371 URL:http://securityreason.com/securityalert/1455  View
191934 20475 CVE-2006-4371 XF:webadmin-multiple-directory-traversal(28488)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58875 JVNDB-2006-001141 pSlash の modules/visitors2/include/config.inc.php における PHP リモートファイルインクルージョンの脆弱性 pSlash の modules/visitors2/include/config.inc.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4373 20475 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001141.html  View