CVE-2006-1997 - Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allow

CVE-2006-1997

Summary

Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors.

References

Vulnerable Configurations

cpe:2.3:a:sybase:pylon_anywhere:5.5.4:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:5.5.4:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.3.2:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.3.2:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.4.8:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.4.8:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.4.9:*:*:*:*:*:*:*
cpe:2.3:a:sybase:pylon_anywhere:6.4.9:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 20-07-2017 - 01:31)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	17677
confirm	http://www.sybase.com/detail?id=1040213
secunia	19784
vupen	ADV-2006-1477
xf	pylon-groupware-unauth-access(25989)

Last major update

20-07-2017 - 01:31

Published

25-04-2006 - 12:50

Last modified

20-07-2017 - 01:31