NVD

Id
62104  
Name
CVE-2006-3426  
Description
Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b) Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. (dot dot) sequence in the (1) action, (2) agentid, or (3) index parameters to dagent/nwupload.asp, which are used as pathname components.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-07-06  
Modified Date
2011-03-07  
Seq
2006-3426  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
321525 62104 CVE-2006-3426 20060629 Multiple Vulnerabilities in PatchLink Update Server 6  View
321526 62104 CVE-2006-3426 1200  View
321527 62104 CVE-2006-3426 1016405  View
321528 62104 CVE-2006-3426 20060629 Multiple Vulnerabilities in PatchLink Update Server 6  View
321529 62104 CVE-2006-3426 18732  View
321530 62104 CVE-2006-3426 ADV-2006-2595  View
321531 62104 CVE-2006-3426 ADV-2006-2596  View

Related JVN