CVE-2006-5750

{"id": "CVE-2006-5750", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-11-27T20:07:00.000", "references": [{"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01390402", "source": "secalert@redhat.com"}, {"url": "http://jira.jboss.com/jira/browse/ASPATCH-126", "source": "secalert@redhat.com"}, {"url": "http://jira.jboss.com/jira/browse/JBAS-3861", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/23095", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/23984", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/24104", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/29726", "source": "secalert@redhat.com"}, {"url": "http://securitytracker.com/id?1017289", "source": "secalert@redhat.com"}, {"url": "http://www.novell.com/linux/security/advisories/2007_02_sr.html", "source": "secalert@redhat.com"}, {"url": "http://www.osvdb.org/30767", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2006-0743.html", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/archive/1/452830/100/0/threaded", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/archive/1/452862/100/100/threaded", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/21219", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2006/4724", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2006/4726", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2007/0554", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2008/1155/references", "source": "secalert@redhat.com"}, {"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/719/3024921_f.SAL_Public.html", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio en la clase JBoss Application Server (jbossas) 3.2.4 hasta 4.0.5 permite a usuarios remotos validados leer o modificar archivos y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n, a trav\u00e9s de vectores no especificados en el administrador de consola."}], "lastModified": "2018-10-17T21:44:37.393", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jboss:jboss_application_server:3.2.5_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BA0BFE2-246F-4F9D-9698-23B7A453C627"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:3.2.6_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5415149C-6EF9-4B94-ABDA-3F52B9A871E6"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:3.2.7_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A5BA730-1650-4CD6-8033-AE7B90F2242F"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:3.2.8.sp1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A496B6B5-C331-4354-9538-51704BC172A8"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:3.2.8_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42EC3FC8-D370-4EA3-8FC5-CB8671A669B4"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.0_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C467186E-74BB-4CC6-A4AA-144DA3A2B0C3"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.1_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D678E52-DEE5-4A77-9504-5E62F9A6E61A"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.1_sp1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EC7B567-CACB-4F07-BE1D-E7420060C4E9"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.2_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C763991-3D3C-40A9-ADA1-1BCD70491224"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.3_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D381E62-7EBD-4F40-92B4-C967C82BBEBD"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.4.ga:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0F232BE-9181-4B28-B9ED-C947BCB754DE"}, {"criteria": "cpe:2.3:a:jboss:jboss_application_server:4.0.5.ga:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2559DFD5-A230-467E-A720-7AE7FA9309CD"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}