NVD

Id
62954  
Name
CVE-2006-4315  
Description
Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and earlier, when running on Windows, might allow local users to gain privileges via a malicious program file under "Program Files" or its subdirectories.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-08-23  
Modified Date
2008-09-05  
Seq
2006-4315  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
327360 62954 CVE-2006-4315 1016743  View
327361 62954 CVE-2006-4315 19679  View
327362 62954 CVE-2006-4315 http://www.ssh.com/company/news/2006/english/security/article/775/  View
327363 62954 CVE-2006-4315 ssh-tectia-pathname-privilege-escalation(28566)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58323 JVNDB-2006-000519 Windows 版の SSH Tectia における権限昇格の脆弱性 Windows 版の SSH Tectia には、外部プログラムの実行時に、実行ファイルのパスに対する処理に不備が存在し、パスにスペースが含まれている場合、最短一致するプログラムを実行してしまう脆弱性が存在します。 CVE-2006-4315 20417 CVE-2006-4315 62954 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000519.html 2006-08-23 2007-04-01 View