NVD

Id
64300  
Name
CVE-2006-5725  
Description
The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-11-03  
Modified Date
2011-06-13  
Seq
2006-5725  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335381 64300 CVE-2006-5725 2637  View
335382 64300 CVE-2006-5725 ADV-2006-4224  View
335383 64300 CVE-2006-5725 smartgate-header-information-disclosure(29802)  View
335384 64300 CVE-2006-5725 https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59226 JVNDB-2006-001492 AEP Smartgate の SSL サーバにおけるディレクトリの存在を確認される脆弱性 AEP Smartgate の SSL サーバには、存在するか否かで異なる HTTP ステイタスコードを返すため、ディレクトリの存在を確認される脆弱性が存在します。 CVE-2006-5725 21827 CVE-2006-5725 64300 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001492.html 2006-11-03 2012-06-26 View