CVE-2006-2247

2006-05-0900:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.012 Low

EPSS

Percentile

85.0%

JSON

WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on
whether or not a username is valid, which allows remote attackers to
enumerate valid usernames.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchwebcalendar< 1.0.4-1UNKNOWN
ubuntu7.10noarchwebcalendar< 1.0.4-1UNKNOWN
ubuntu8.04noarchwebcalendar< 1.0.4-1UNKNOWN
ubuntu8.10noarchwebcalendar< 1.0.4-1UNKNOWN
ubuntu9.04noarchwebcalendar< 1.0.4-1UNKNOWN
ubuntu9.10noarchwebcalendar< 1.0.4-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	webcalendar	< 1.0.4-1	UNKNOWN
ubuntu	7.10	noarch	webcalendar	< 1.0.4-1	UNKNOWN
ubuntu	8.04	noarch	webcalendar	< 1.0.4-1	UNKNOWN
ubuntu	8.10	noarch	webcalendar	< 1.0.4-1	UNKNOWN
ubuntu	9.04	noarch	webcalendar	< 1.0.4-1	UNKNOWN
ubuntu	9.10	noarch	webcalendar	< 1.0.4-1	UNKNOWN