Lucene search

[email protected]NVD:CVE-2006-6675

HistoryDec 21, 2006 - 1:28 a.m.

CVE-2006-6675

2006-12-2101:28:00

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

High

EPSS

0.004

Percentile

74.7%

JSON

Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app.

Affected configurations

Nvd

Node

novellapache_http_serverMatch2.0.48netware

Node

novellnetwareMatch6.5sp5

novellnetwareMatch6.5sp6

VendorProductVersionCPE
novellapache_http_server2.0.48cpe:2.3:a:novell:apache_http_server:2.0.48:*:netware:*:*:*:*:*
novellnetware6.5cpe:2.3:o:novell:netware:6.5:sp5:*:*:*:*:*:*
novellnetware6.5cpe:2.3:o:novell:netware:6.5:sp6:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	apache_http_server	2.0.48	cpe:2.3:a:novell:apache_http_server:2.0.48::netware:::::
novell	netware	6.5	cpe:2.3:o:novell:netware:6.5:sp5::::::
novell	netware	6.5	cpe:2.3:o:novell:netware:6.5:sp6::::::

References

secunia.com/advisories/23406

www.securityfocus.com/bid/21678

www.vupen.com/english/advisories/2006/5090

secure-support.novell.com/KanisaPlatform/Publishing/514/3319127_f.SAL_Public.html

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

High

EPSS

0.004

Percentile

74.7%

JSON

Related for NVD:CVE-2006-6675

cvelist1 cve1