Lucene search

[email protected]NVD:CVE-2006-6454

HistoryDec 10, 2006 - 9:28 p.m.

CVE-2006-6454

2006-12-1021:28:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.011

Percentile

84.4%

JSON

execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the (1) exe and (2) args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

j-owampweb_interfaceRange≤2.1b

VendorProductVersionCPE
j-owampweb_interface*cpe:2.3:a:j-owamp:web_interface:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
j-owamp	web_interface	*	cpe:2.3:a:j-owamp:web_interface::::::::

References

www.vupen.com/english/advisories/2006/4905

exchange.xforce.ibmcloud.com/vulnerabilities/30781

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.011

Percentile

84.4%

JSON

Related for NVD:CVE-2006-6454

cve1 cvelist1