CVE

Id
22782  
CVE No.
CVE-2006-6678  
Status
Candidate  
Description
The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename.  
Phase
Assigned (20061220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
220319 22782 CVE-2006-6678 MISC:http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3&r2=1.4  View
220320 22782 CVE-2006-6678 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=472131&group_id=23183  View
220321 22782 CVE-2006-6678 DEBIAN:DSA-1251  View
220322 22782 CVE-2006-6678 URL:http://www.debian.org/security/2007/dsa-1251  View
220323 22782 CVE-2006-6678 BID:22158  View
220324 22782 CVE-2006-6678 URL:http://www.securityfocus.com/bid/22158  View
220325 22782 CVE-2006-6678 VUPEN:ADV-2006-5092  View
220326 22782 CVE-2006-6678 URL:http://www.vupen.com/english/advisories/2006/5092  View
220327 22782 CVE-2006-6678 SECUNIA:23822  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59518 JVNDB-2006-001784 Pedro Lineu Orso chetcpasswd における重要な情報を取得される脆弱性 Pedro Lineu Orso chetcpasswd は、/etc/chetcpasswd.allow 上の 0400 パーミッションの必要性を文書化しないため、重要な情報を取得される脆弱性が存在します。 CVE-2006-6680 22782 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001784.html  View