CVE-2006-2839

Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1
http://sourceforge.net/project/shownotes.php?release_id=421453
http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257
http://secunia.com/advisories/20405	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2006/2086
https://exchange.xforce.ibmcloud.com/vulnerabilities/26975

Configurations

Configuration 1 (hide)

cpe:2.3:a:webwork:webwork:*:*:*:*:*:*:*:*

Information

Published : 2006-06-06 20:06

Updated : 2017-07-20 01:31

NVD link : CVE-2006-2839

Mitre link : CVE-2006-2839

JSON object : View

Products Affected

webwork

webwork

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1", "name": "http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1", "tags": [], "refsource": "CONFIRM"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=421453", "name": "http://sourceforge.net/project/shownotes.php?release_id=421453", "tags": [], "refsource": "CONFIRM"}, {"url": "http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257", "name": "http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257", "tags": [], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/20405", "name": "20405", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2006/2086", "name": "ADV-2006-2086", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26975", "name": "webwork-pgproblemeditor-security-bypass(26975)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-2839", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-06-06T20:06Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:webwork:webwork:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.2.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-20T01:31Z"}