NVD

Id
65222  
Name
CVE-2006-6678  
Description
The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-20  
Modified Date
2011-03-07  
Seq
2006-6678  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
340419 65222 CVE-2006-6678 http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3&r2=1.4  View
340420 65222 CVE-2006-6678 http://sourceforge.net/project/shownotes.php?release_id=472131&group_id=23183  View
340421 65222 CVE-2006-6678 DSA-1251  View
340422 65222 CVE-2006-6678 22158  View
340423 65222 CVE-2006-6678 ADV-2006-5092  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60354 JVNDB-2006-002620 Netrik の edit_textarea 関数における任意のコマンドを実行される脆弱性 Netrik の form-file.c の edit_textarea 関数は、textarea フィールドを編集している際、テンポラリファイル名を適切に検証しないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2006-6678 22780 CVE-2006-6678 65222 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002620.html 2006-12-20 2012-09-25 View