NVD

Id
63602  
Name
CVE-2006-4994  
Description
Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicious program file in %SYSTEMDRIVE%, which is run when XAMPP attempts to execute (1) FileZillaServer.exe, (2) mysqld-nt.exe, (3) Perl.exe, or (4) xamppcontrol.exe with an unquoted "Program Files" pathname.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-25  
Modified Date
2008-09-05  
Seq
2006-4994  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
331491 63602 CVE-2006-4994 20060521 [TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostarthttp  View
331492 63602 CVE-2006-4994 http://secdev.zoller.lu/research/xamp1.htm  View
331493 63602 CVE-2006-4994 http://www.apachefriends.org/en/news-article,75557.html  View
331494 63602 CVE-2006-4994 20060521 [TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostart  View
331495 63602 CVE-2006-4994 xampp-insecure-start-path(26581)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59047 JVNDB-2006-001313 Apache Friends XAMPP における権限を取得される脆弱性 Apache Friends XAMPP には、権限を取得される脆弱性が存在します。 CVE-2006-4994 21096 CVE-2006-4994 63602 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001313.html 2006-09-25 2012-06-26 View