CVE-2006-2406 - Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and

CVE-2006-2406

Summary

Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the design_path parameter. NOTE: this is closely related, but a different vulnerability than the ABBC[Config][smileset] parameter.

References

Vulnerable Configurations

cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:*:*:*:*:*:*:*:*
cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:*:*:*:*:*:*:*:*

CVSS

Base:	2.6 (as of 05-09-2008 - 21:04)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:H/Au:N/C:N/I:P/A:N

refmap via4

confirm	http://newsboard.unclassified.de/forum/post/6499
osvdb	25494
vim	20060517 Unclassified NewsBoard directory traversal variant

Last major update

05-09-2008 - 21:04

Published

16-05-2006 - 10:02

Last modified

05-09-2008 - 21:04