Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-2221
HistoryMay 05, 2006 - 7:02 p.m.

CVE-2006-2221

2006-05-0519:02:00
mitre
web.nvd.nist.gov
29
security
vulnerability
installer
dos
symlink attack
bitrock
ejabberd
nvd
cve-2006-2221

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

25.6%

JSON

A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one ejabberd 1.1.1_1 and earlier, generates an installer that allows local users to cause a denial of service via a symlink attack on the bitrock_installer.log temporary file. NOTE: it is possible that this vulnerability is present in other products that use this installer.

Affected configurations

Nvd
Node
bitrockinstall_builderRange≤3.6.0
OR
process-oneejabberdRange≤1.1.1.1
OR
process-oneejabberdMatch1.1.1.0
VendorProductVersionCPE
bitrockinstall_builder*cpe:2.3:a:bitrock:install_builder:*:*:*:*:*:*:*:*
process-oneejabberd*cpe:2.3:a:process-one:ejabberd:*:*:*:*:*:*:*:*
process-oneejabberd1.1.1.0cpe:2.3:a:process-one:ejabberd:1.1.1.0:*:*:*:*:*:*:*

Related

prion 1
debiancve 1
cvelist 1
nvd 1
prion
prion
Code injection
2006-05-05 19:02:00
debiancve
debiancve
CVE-2006-2221
2006-05-05 19:02:00
cvelist
cvelist
CVE-2006-2221
2006-05-05 19:00:00
nvd
nvd
CVE-2006-2221
2006-05-05 19:02:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

25.6%

JSON
Related for CVE-2006-2221
prion1debiancve1cvelist1nvd1