CVE

Id
21004  
CVE No.
CVE-2006-4900  
Status
Candidate  
Description
Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via ".." sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not properly handled by the getadhochtml function.  
Phase
Assigned (20060920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
199123 21004 CVE-2006-4900 BUGTRAQ:20060921 [CAID 34616, 34617, 34618]: CA eSCC and eTrust Audit vulnerabilities  View
199124 21004 CVE-2006-4900 URL:http://www.securityfocus.com/archive/1/archive/1/446611/100/0/threaded  View
199125 21004 CVE-2006-4900 BUGTRAQ:20060922 RE: Computer Associates eTrust Security Command Center Multiple Vulnerabilities  View
199126 21004 CVE-2006-4900 URL:http://www.securityfocus.com/archive/1/archive/1/446716/100/0/threaded  View
199127 21004 CVE-2006-4900 MISC:http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt  View
199128 21004 CVE-2006-4900 CONFIRM:http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9  View
199129 21004 CVE-2006-4900 CONFIRM:http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34617  View
199130 21004 CVE-2006-4900 BID:20139  View
199131 21004 CVE-2006-4900 URL:http://www.securityfocus.com/bid/20139  View
199132 21004 CVE-2006-4900 VUPEN:ADV-2006-3738  View
199133 21004 CVE-2006-4900 URL:http://www.vupen.com/english/advisories/2006/3738  View
199134 21004 CVE-2006-4900 OSVDB:29010  View
199135 21004 CVE-2006-4900 URL:http://www.osvdb.org/29010  View
199136 21004 CVE-2006-4900 SECTRACK:1016910  View
199137 21004 CVE-2006-4900 URL:http://securitytracker.com/id?1016910  View
199138 21004 CVE-2006-4900 SECUNIA:22023  View
199139 21004 CVE-2006-4900 URL:http://secunia.com/advisories/22023  View
199140 21004 CVE-2006-4900 XF:ca-etrust-esmpauditservlet-dir-traversal(29104)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60930 JVNDB-2006-003196 Symantec Veritas NetBackup の NetBackup bpcd デーモンにおける任意のコマンドを実行される脆弱性 Symantec Veritas NetBackup の NetBackup bpcd デーモン (bpcd.exe) は、チェインコマンドを適切にチェックしないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2006-4902 21004 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003196.html  View