CVE-2006-1069

Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.geeklog.net/article.php/geeklog-1.4.0sr2	Patch
http://www.securityfocus.com/bid/17010
http://www.vupen.com/english/advisories/2006/0851

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:::::::*
	cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.9:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.11:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:::::::*
	cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:::::::*
	cpe:2.3:a:geeklog:geeklog:1.4.0:::::::*

Information

Published : 2006-03-07 23:02

Updated : 2011-03-08 02:31

NVD link : CVE-2006-1069

Mitre link : CVE-2006-1069

JSON object : View

Products Affected

geeklog

geeklog

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.geeklog.net/article.php/geeklog-1.4.0sr2", "name": "http://www.geeklog.net/article.php/geeklog-1.4.0sr2", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/17010", "name": "17010", "tags": [], "refsource": "BID"}, {"url": "http://www.vupen.com/english/advisories/2006/0851", "name": "ADV-2006-0851", "tags": [], "refsource": "VUPEN"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-1069", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-03-07T23:02Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2011-03-08T02:31Z"}