Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 07/07/2006 Updated: 18/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

FastPatch for (a) PatchLink Update Server (PLUS) prior to 6.1 P1 and 6.2.x prior to 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and previous versions, does not require authentication for dagent/proxyreg.asp, which allows remote malicious users to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
lumension patchlink update server 6.2.0.189
novell zenworks
lumension patchlink update server 6.1
lumension patchlink update server 6.2.0.181

NVD-CWE-Other http://securitytracker.com/id?1016405 http://secunia.com/advisories/20876 http://secunia.com/advisories/20878 http://www.securityfocus.com/bid/18723 http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html http://securityreason.com/securityalert/1200 http://www.vupen.com/english/advisories/2006/2595 http://www.vupen.com/english/advisories/2006/2596 http://www.securityfocus.com/archive/1/438710/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-3425

Vulnerability Summary

References

Vulmon Search

About

Products

Connect