Lucene search

K
cveMitreCVE-2006-3766
HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3766

2006-07-2114:03:00
mitre
web.nvd.nist.gov
23
cve-2006-3766
osdate
script archive
security vulnerability
rating manipulation

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

70.6%

Darren’s $5 Script Archive osDate 1.1.7 and earlier allows users to boost their own ratings via a txtrating parameter with a score greater than the intended maximum of 10.

Affected configurations

Nvd
Node
darrens_5-dollar_script_archiveosdateRange1.1.7
OR
darrens_5-dollar_script_archiveosdateMatch1.1.5
OR
darrens_5-dollar_script_archiveosdateMatch1.1.6
VendorProductVersionCPE
darrens_5-dollar_script_archiveosdate*cpe:2.3:a:darrens_5-dollar_script_archive:osdate:*:*:*:*:*:*:*:*
darrens_5-dollar_script_archiveosdate1.1.5cpe:2.3:a:darrens_5-dollar_script_archive:osdate:1.1.5:*:*:*:*:*:*:*
darrens_5-dollar_script_archiveosdate1.1.6cpe:2.3:a:darrens_5-dollar_script_archive:osdate:1.1.6:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

70.6%

Related for CVE-2006-3766