Lucene search

MitreCVE-2006-5082

HistorySep 29, 2006 - 12:07 a.m.

CVE-2006-5082

2006-09-2900:07:00

mitre

web.nvd.nist.gov

vulnerability

sugar suite open source

sugarcrm

code execution

attack vectors

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.009

Percentile

83.2%

JSON

Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact, related to code execution, and unspecified attack vectors.

Affected configurations

Nvd

Node

sugarcrmsugar_suiteMatch3.5

sugarcrmsugar_suiteMatch3.5.1

sugarcrmsugar_suiteMatch4.0.1

sugarcrmsugar_suiteMatch4.0_beta

sugarcrmsugar_suiteMatch4.1

sugarcrmsugar_suiteMatch4.2

sugarcrmsugar_suiteMatch4.2.1

VendorProductVersionCPE
sugarcrmsugar_suite3.5cpe:2.3:a:sugarcrm:sugar_suite:3.5:*:*:*:*:*:*:*
sugarcrmsugar_suite3.5.1cpe:2.3:a:sugarcrm:sugar_suite:3.5.1:*:*:*:*:*:*:*
sugarcrmsugar_suite4.0.1cpe:2.3:a:sugarcrm:sugar_suite:4.0.1:*:*:*:*:*:*:*
sugarcrmsugar_suite4.0_betacpe:2.3:a:sugarcrm:sugar_suite:4.0_beta:*:*:*:*:*:*:*
sugarcrmsugar_suite4.1cpe:2.3:a:sugarcrm:sugar_suite:4.1:*:*:*:*:*:*:*
sugarcrmsugar_suite4.2cpe:2.3:a:sugarcrm:sugar_suite:4.2:*:*:*:*:*:*:*
sugarcrmsugar_suite4.2.1cpe:2.3:a:sugarcrm:sugar_suite:4.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sugarcrm	sugar_suite	3.5	cpe:2.3:a:sugarcrm:sugar_suite:3.5:::::::*
sugarcrm	sugar_suite	3.5.1	cpe:2.3:a:sugarcrm:sugar_suite:3.5.1:::::::*
sugarcrm	sugar_suite	4.0.1	cpe:2.3:a:sugarcrm:sugar_suite:4.0.1:::::::*
sugarcrm	sugar_suite	4.0_beta	cpe:2.3:a:sugarcrm:sugar_suite:4.0_beta:::::::*
sugarcrm	sugar_suite	4.1	cpe:2.3:a:sugarcrm:sugar_suite:4.1:::::::*
sugarcrm	sugar_suite	4.2	cpe:2.3:a:sugarcrm:sugar_suite:4.2:::::::*
sugarcrm	sugar_suite	4.2.1	cpe:2.3:a:sugarcrm:sugar_suite:4.2.1:::::::*

References

secunia.com/advisories/22110

www.securityfocus.com/bid/20217

www.sugarcrm.com/forums/showthread.php?t=16348

www.vupen.com/english/advisories/2006/3783

exchange.xforce.ibmcloud.com/vulnerabilities/29182

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.009

Percentile

83.2%

JSON

Related for CVE-2006-5082