NVD

Id
60924  
Name
CVE-2006-2221  
Description
A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one ejabberd 1.1.1_1 and earlier, generates an installer that allows local users to cause a denial of service via a symlink attack on the bitrock_installer.log temporary file. NOTE: it is possible that this vulnerability is present in other products that use this installer.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-05-05  
Modified Date
2011-03-07  
Seq
2006-2221  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
314614 60924 CVE-2006-2221 20060502 Ejabberd : Symlink vulnerability during installation process  View
314615 60924 CVE-2006-2221 20060503 Re: Ejabberd : Symlink vulnerability during installation process  View
314616 60924 CVE-2006-2221 17804  View
314617 60924 CVE-2006-2221 ADV-2006-1642  View
314618 60924 CVE-2006-2221 ADV-2006-1659  View
314619 60924 CVE-2006-2221 ejabberd-bitrockinstaller-symlink(26221)  View
314620 60924 CVE-2006-2221 installbuilder-bitrockinstaller-symlink(26261)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61514 JVNDB-2006-003780 Process-one ejabberd を含む製品で使用されるサードパーティ製インストーラ生成ツールにおけるサービス運用妨害 (DoS) の脆弱性 Process-one ejabberd を含む製品で使用される BitRock InstallBuilder などのサードパーティ製インストーラ生成ツールには、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2006-2221 18323 CVE-2006-2221 60924 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003780.html 2006-05-05 2013-12-26 View