CVE-2006-1141

{"id": "CVE-2006-1141", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-03-10T11:02:00.000", "references": [{"url": "http://cvs.sourceforge.net/viewcvs.py/qmailadmin/qmailadmin/qmailadmin.c?r1=1.6.2.10&r2=1.6.2.11", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/19262", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23019", "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200611-15.xml", "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?group_id=6691&release_id=395211", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/23705", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/16994", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/0852", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25065", "source": "cve@mitre.org"}, {"url": "http://cvs.sourceforge.net/viewcvs.py/qmailadmin/qmailadmin/qmailadmin.c?r1=1.6.2.10&r2=1.6.2.11", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/19262", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23019", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://security.gentoo.org/glsa/glsa-200611-15.xml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sourceforge.net/project/shownotes.php?group_id=6691&release_id=395211", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/23705", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/16994", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/0852", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25065", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATH_INFO environment variable."}], "lastModified": "2024-11-21T00:08:10.540", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:inter7:qmailadmin:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "336C8A4D-C6CA-4325-8398-CCCFAAC850F1"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F366EFE3-EED4-422D-826C-134F9B8492B6"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C66E9BF4-F534-4394-8286-009FA352BD6A"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4318740-E649-41E3-B9DB-C6055C8AA3D9"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C6A330A-3FA7-4152-8630-9E90B6DE9C7C"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A9B9292-79A0-4596-856C-073F3EBA8113"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F074F1C-32E4-4CE8-A8A4-4372BE59CD09"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7FD7A89-6F5F-4FC7-971F-066A68E9891C"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7B7FF0B-779C-4340-9CA7-06CA50306CE7"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDD6BE7C-4E13-42B4-A5FA-5105F4B95DFD"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6712972-1C36-42C9-A835-C4ED20302DDF"}, {"criteria": "cpe:2.3:a:inter7:qmailadmin:1.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E16E9422-EBE3-483F-82A8-84465BBB42D3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}