admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-29 01:31:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2006/CVE-2006-67xx/CVE-2006-6772.json
cad-safe-bot e6cbafdc40 Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00

295 lines
8.4 KiB
JSON
Raw Blame History

{
"id": "CVE-2006-6772",
"sourceIdentifier": "cve@mitre.org",
"published": "2006-12-27T23:28:00.000",
"lastModified": "2024-11-21T00:23:37.067",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL."
},
{
"lang": "es",
"value": "Vulnerabilidad de cadena de formato en la funci\u00f3n inputAnswer en file.c de w3m 0.5.2, cuando se ejecuta con la opci\u00f3n de volcado (dump) o backend, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante especificadores de cadena de formato en el campo Nombre Com\u00fan (Common Name o CN) de un certificado SSL."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"baseScore": 9.3,
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": true,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-134"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:w3m:w3m:0.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8F48F335-F985-4C9F-BF31-EBBA881C5F1C"
}
]
}
]
}
],
"references": [
{
"url": "http://fedoranews.org/cms/node/2415",
"source": "cve@mitre.org"
},
{
"url": "http://fedoranews.org/cms/node/2416",
"source": "cve@mitre.org"
},
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/23492",
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/advisories/23588",
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/advisories/23717",
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/advisories/23773",
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/advisories/23792",
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://security.gentoo.org/glsa/glsa-200701-06.xml",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1017440",
"source": "cve@mitre.org"
},
{
"url": "http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439",
"source": "cve@mitre.org"
},
{
"url": "http://w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79",
"source": "cve@mitre.org"
},
{
"url": "http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250",
"source": "cve@mitre.org"
},
{
"url": "http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log",
"source": "cve@mitre.org"
},
{
"url": "http://www.novell.com/linux/security/advisories/2007_05_w3m.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/21735",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/24332",
"source": "cve@mitre.org"
},
{
"url": "http://www.ubuntu.com/usn/usn-399-1",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/5164",
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31114",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34821",
"source": "cve@mitre.org"
},
{
"url": "http://fedoranews.org/cms/node/2415",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://fedoranews.org/cms/node/2416",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/23492",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/advisories/23588",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/advisories/23717",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/advisories/23773",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/advisories/23792",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://security.gentoo.org/glsa/glsa-200701-06.xml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1017440",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.novell.com/linux/security/advisories/2007_05_w3m.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/21735",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/24332",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/usn-399-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/5164",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31114",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34821",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vendorComments": [
{
"organization": "Red Hat",
"comment": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"lastModified": "2007-03-14T00:00:00"
}
]
}
Reference in New Issue View Git Blame Copy Permalink