CVE-2006-5862

{"id": "CVE-2006-5862", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-11-11T01:07:00.000", "references": [{"url": "http://secunia.com/advisories/22766", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=461986", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/20995", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/4447", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30174", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/22766", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=461986", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/20995", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/4447", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30174", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in the session mechanism of the web interface for Network Administration Visualized (NAV) before 3.1.1 allows attackers with filesystem write access to have an unknown impact via unknown attack vectors."}, {"lang": "es", "value": "Vulnerabilidad en el salto de directorio en el mecanismo de la sesi\u00f3n del interfaz web para el Network Administration Visualized (NAV) en versiones anteriores a la 3.1.1 permite a atacantes con acceso de escritura al fichero de sistema, tener un impacto desconocido a trav\u00e9s de vectores de ataque desconocidos."}], "lastModified": "2024-11-21T00:20:51.710", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:network_administration_visualized:network_administration_visualized:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AC313AA-BD1A-4342-94B0-710561A0A75A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}