NVD

Id
62499  
Name
CVE-2006-3831  
Description
The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-07-25  
Modified Date
2008-09-05  
Seq
2006-3831  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324676 62499 CVE-2006-3831 1271  View
324677 62499 CVE-2006-3831 1016515  View
324678 62499 CVE-2006-3831 http://www.acid-root.new.fr/advisories/boastmachine.txt  View
324679 62499 CVE-2006-3831 20060717 boastMachine <= 3.1 SQL Injection Exploit  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60633 JVNDB-2006-002899 Kailash Nadh boastMachine の Backup セレクションにおける重要な情報を取得される脆弱性 Kailash Nadh boastMachine (前 bMachine) の Backup セレクションは、データベースバックアップに予測可能なファイル名を使用し、不十分なアクセスコントロールで Web ルート配下に格納するため、重要な情報を取得される脆弱性が存在します。 CVE-2006-3831 19933 CVE-2006-3831 62499 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002899.html 2006-07-25 2012-12-20 View