CVE

Id
22481  
CVE No.
CVE-2006-6377  
Status
Candidate  
Description
Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain the admin password hash via a direct request for /password.txt.  
Phase
Assigned (20061207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
217202 22481 CVE-2006-6377 BUGTRAQ:20061206 Uploadscript Vulnerabilities: Text file Hash password  View
217203 22481 CVE-2006-6377 URL:http://www.securityfocus.com/archive/1/archive/1/453644/100/0/threaded  View
217204 22481 CVE-2006-6377 BUGTRAQ:20070122 UploadScript <=- v1.02 (password.txt) Remote Password Disclosure Vulnerability  View
217205 22481 CVE-2006-6377 URL:http://www.securityfocus.com/archive/1/archive/1/457696/100/0/threaded  View
217206 22481 CVE-2006-6377 VUPEN:ADV-2006-4893  View
217207 22481 CVE-2006-6377 URL:http://www.vupen.com/english/advisories/2006/4893  View
217208 22481 CVE-2006-6377 SECUNIA:23264  View
217209 22481 CVE-2006-6377 URL:http://secunia.com/advisories/23264  View
217210 22481 CVE-2006-6377 SREASON:2003  View
217211 22481 CVE-2006-6377 URL:http://securityreason.com/securityalert/2003  View
217212 22481 CVE-2006-6377 XF:uploadscript-password-info-disclosure(30747)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59442 JVNDB-2006-001708 複数の CA 製品の BrightStor Backup Discovery Service におけるバッファオーバーフローの脆弱性 ARCserve Backup、Enterprise Backup および CA Server Protection Suite を含む CA 製品の BrightStor Backup Discovery Service には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-6379 22481 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001708.html  View