CVE-2006-0658

Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions that are not listed in the Config[DeniedExtensions][File], such as .php.txt.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://retrogod.altervista.org/fckeditor_22_xpl.html	Exploit
http://secunia.com/advisories/18767	Vendor Advisory
http://www.securityfocus.com/archive/1/424708	Exploit
http://www.vupen.com/english/advisories/2006/0502	Vendor Advisory
https://www.exploit-db.com/exploits/3702
http://retrogod.altervista.org/fckeditor_22_xpl.html	Exploit
http://secunia.com/advisories/18767	Vendor Advisory
http://www.securityfocus.com/archive/1/424708	Exploit
http://www.vupen.com/english/advisories/2006/0502	Vendor Advisory
https://www.exploit-db.com/exploits/3702

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fckeditor:fckeditor:2.0:::::::*
	cpe:2.3:a:fckeditor:fckeditor:2.2:::::::*

History

21 Nov 2024, 00:07

Type	Values Removed	Values Added
References	~~() http://retrogod.altervista.org/fckeditor_22_xpl.html - Exploit~~	() http://retrogod.altervista.org/fckeditor_22_xpl.html - Exploit
References	~~() http://secunia.com/advisories/18767 - Vendor Advisory~~	() http://secunia.com/advisories/18767 - Vendor Advisory
References	~~() http://www.securityfocus.com/archive/1/424708 - Exploit~~	() http://www.securityfocus.com/archive/1/424708 - Exploit
References	~~() http://www.vupen.com/english/advisories/2006/0502 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2006/0502 - Vendor Advisory
References	~~() https://www.exploit-db.com/exploits/3702 -~~	() https://www.exploit-db.com/exploits/3702 -

Information

Published : 2006-02-13 11:06

Updated : 2024-11-21 00:07

NVD link : CVE-2006-0658

Mitre link : CVE-2006-0658

CVE.ORG link : CVE-2006-0658

JSON object : View

Products Affected

fckeditor

fckeditor

CWE

NVD-CWE-Other

{"id": "CVE-2006-0658", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-02-13T11:06:00.000", "references": [{"url": "http://retrogod.altervista.org/fckeditor_22_xpl.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/18767", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/424708", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/0502", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/3702", "source": "cve@mitre.org"}, {"url": "http://retrogod.altervista.org/fckeditor_22_xpl.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/18767", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/424708", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/0502", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/3702", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions that are not listed in the Config[DeniedExtensions][File], such as .php.txt."}], "lastModified": "2024-11-21T00:07:01.510", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fckeditor:fckeditor:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A396BB3-7329-4522-8C5F-99CCA41C9DA6"}, {"criteria": "cpe:2.3:a:fckeditor:fckeditor:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2823302-CCF1-438B-B962-6EE49D371A28"}], "operator": "OR"}]}], "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/184.html\r\n'CWE-184: Incomplete Blacklist'", "sourceIdentifier": "cve@mitre.org"}