NVD

Id
64540  
Name
CVE-2006-5965  
Description
PassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions (Everyone/Full Control) for the PassGo Technologies directory, which allows local users to gain privileges by modifying critical programs.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-26  
Modified Date
2011-03-07  
Seq
2006-5965  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
336847 64540 CVE-2006-5965 1017272  View
336848 64540 CVE-2006-5965 20061122 Secunia Research: PassGo SSO Plus Insecure Default DirectoryPermissions  View
336849 64540 CVE-2006-5965 21244  View
336850 64540 CVE-2006-5965 ADV-2006-4660  View
336851 64540 CVE-2006-5965 ssoplus-directory-insecure-permissions(30475)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60160 JVNDB-2006-002426 PassGo SSO Plus における権限を取得される脆弱性 PassGo SSO Plus は、安全でないパーミッション (Everyone/Full Control) を PassGo Technologies ディレクトリに使用するため、権限を取得される脆弱性が存在します。 CVE-2006-5965 22067 CVE-2006-5965 64540 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002426.html 2006-11-26 2012-09-25 View