NVD

Id
62297  
Name
CVE-2006-3623  
Description
Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the directory and filename in a PropsResponse (PackageType) request.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-18  
Modified Date
2011-03-07  
Seq
2006-3623  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322783 62297 CVE-2006-3623 1016501  View
322784 62297 CVE-2006-3623 http://www.eeye.com/html/research/advisories/AD20060713.html  View
322785 62297 CVE-2006-3623 20060714 EEYE: McAfee ePolicy Orchestrator Remote Compromise  View
322786 62297 CVE-2006-3623 18979  View
322787 62297 CVE-2006-3623 ADV-2006-2796  View
322788 62297 CVE-2006-3623 epolicy-epo-directory-traversal(27738)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60513 JVNDB-2006-002779 McAfee ePolicy Orchestrator agent の Framework Service コンポーネントにおけるディレクトリトラバーサルの脆弱性 McAfee ePolicy Orchestrator agent の Framework Service コンポーネントには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-3623 19725 CVE-2006-3623 62297 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002779.html 2006-07-18 2012-12-20 View