All the vulnerabilites related to Cybozu, Inc. - Cybozu AG
jvndb-2006-000649
Vulnerability from jvndb
Published
2008-05-21 00:00
Modified
2008-05-21 00:00
Summary
Cybozu Office 6 information disclosure vulnerability
Details
A vulnerability exists in Cybozu Office 6 allowing the disclosure of registered users or groups information.
Cybozu Office 6 provides several login methods. One of the methods, meant to be used in the Internet, allows direct entry of a username. However, even when this method is used, information of registered users and groups could be obtained by an attacker.
References
Impacted products
{ "@rdf:about": "https://jvndb.jvn.jp/en/contents/2006/JVNDB-2006-000649.html", "dc:date": "2008-05-21T00:00+09:00", "dcterms:issued": "2008-05-21T00:00+09:00", "dcterms:modified": "2008-05-21T00:00+09:00", "description": "A vulnerability exists in Cybozu Office 6 allowing the disclosure of registered users or groups information.\r\n\r\nCybozu Office 6 provides several login methods. One of the methods, meant to be used in the Internet, allows direct entry of a username. However, even when this method is used, information of registered users and groups could be obtained by an attacker.", "link": "https://jvndb.jvn.jp/en/contents/2006/JVNDB-2006-000649.html", "sec:cpe": [ { "#text": "cpe:/a:cybozu:ag_pocket", "@product": "Cybozu AG Pocket", "@vendor": "Cybozu, Inc.", "@version": "2.2" }, { "#text": "cpe:/a:cybozu:cybozu_ag", "@product": "Cybozu AG", "@vendor": "Cybozu, Inc.", "@version": "2.2" }, { "#text": "cpe:/a:cybozu:garoon", "@product": "Cybozu Garoon", "@vendor": "Cybozu, Inc.", "@version": "2.2" }, { "#text": "cpe:/a:cybozu:office", "@product": "Cybozu Office", "@vendor": "Cybozu, Inc.", "@version": "2.2" }, { "#text": "cpe:/a:cybozu:share360", "@product": "Cybozu Share360", "@vendor": "Cybozu, Inc.", "@version": "2.2" } ], "sec:cvss": { "@score": "4.3", "@severity": "Medium", "@type": "Base", "@vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "@version": "2.0" }, "sec:identifier": "JVNDB-2006-000649", "sec:references": [ { "#text": "http://jvn.jp/en/jp/JVN31125599/index.html", "@id": "JVN#31125599", "@source": "JVN" }, { "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4492", "@id": "CVE-2006-4492", "@source": "CVE" }, { "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4492", "@id": "CVE-2006-4492", "@source": "NVD" }, { "#text": "http://secunia.com/advisories/21623", "@id": "SA21623", "@source": "SECUNIA" }, { "#text": "http://www.osvdb.org/28263", "@id": "28263", "@source": "OSVDB" } ], "title": "Cybozu Office 6 information disclosure vulnerability" }
jvndb-2006-000651
Vulnerability from jvndb
Published
2008-05-21 00:00
Modified
2008-05-21 00:00
Summary
Cybozu products vulnerable to directory traversal
Details
Multiple Cybozu products contain a directory traversal vulnerability.
References
Impacted products
{ "@rdf:about": "https://jvndb.jvn.jp/en/contents/2006/JVNDB-2006-000651.html", "dc:date": "2008-05-21T00:00+09:00", "dcterms:issued": "2008-05-21T00:00+09:00", "dcterms:modified": "2008-05-21T00:00+09:00", "description": "Multiple Cybozu products contain a directory traversal vulnerability.", "link": "https://jvndb.jvn.jp/en/contents/2006/JVNDB-2006-000651.html", "sec:cpe": [ { "#text": "cpe:/a:cybozu:ag_pocket", "@product": "Cybozu AG Pocket", "@vendor": "Cybozu, Inc.", "@version": "2.2" }, { "#text": "cpe:/a:cybozu:collaborex", "@product": "Cybozu Collaborex", "@vendor": "Cybozu, Inc.", "@version": "2.2" }, { "#text": "cpe:/a:cybozu:cybozu_ag", "@product": "Cybozu AG", "@vendor": "Cybozu, Inc.", "@version": "2.2" }, { "#text": "cpe:/a:cybozu:garoon", "@product": "Cybozu Garoon", "@vendor": "Cybozu, Inc.", "@version": "2.2" }, { "#text": "cpe:/a:cybozu:mailwise", "@product": "Cybozu Mailwise", "@vendor": "Cybozu, Inc.", "@version": "2.2" } ], "sec:cvss": { "@score": "4.0", "@severity": "Medium", "@type": "Base", "@vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "@version": "2.0" }, "sec:identifier": "JVNDB-2006-000651", "sec:references": [ { "#text": "http://jvn.jp/en/jp/JVN90420168/index.html", "@id": "JVN#90420168", "@source": "JVN" }, { "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4491", "@id": "CVE-2006-4491", "@source": "CVE" }, { "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4491", "@id": "CVE-2006-4491", "@source": "NVD" }, { "#text": "http://secunia.com/advisories/21656", "@id": "SA21656", "@source": "SECUNIA" }, { "#text": "http://securitytracker.com/id?1016759", "@id": "1016759", "@source": "SECTRACK" }, { "#text": "http://www.osvdb.org/28262", "@id": "28262", "@source": "OSVDB" } ], "title": "Cybozu products vulnerable to directory traversal" }