FKIE_CVE-2006-1069

Vulnerability from fkie_nvd - Published: 2006-03-07 23:02 - Updated: 2025-04-03 01:03
Severity ?
Summary
Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors.
References
cve@mitre.orghttp://www.geeklog.net/article.php/geeklog-1.4.0sr2Patch
cve@mitre.orghttp://www.securityfocus.com/bid/17010
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/0851
af854a3a-2127-422b-91ae-364da2661108http://www.geeklog.net/article.php/geeklog-1.4.0sr2Patch
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17010
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/0851
Impacted products
Vendor Product Version
geeklog geeklog 1.3.9
geeklog geeklog 1.3.9_sr1
geeklog geeklog 1.3.9_sr2
geeklog geeklog 1.3.9_sr3
geeklog geeklog 1.3.9_sr4
geeklog geeklog 1.3.11
geeklog geeklog 1.3.11_sr1
geeklog geeklog 1.3.11_sr2
geeklog geeklog 1.3.11_sr3
geeklog geeklog 1.3.11_sr4
geeklog geeklog 1.4.0
geeklog geeklog 1.4.0_sr1
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "E112CB5B-FBE1-4EF6-927E-96AEEB11C55F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C00D6C8B-2533-4BC4-93AD-87FFCBDF521A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*",
              "matchCriteriaId": "794C8A9D-36BC-4C33-8873-9476804F00B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FFB261F-59CE-4C0C-91C2-C094CFB97888",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9CF673C-9C94-4024-8757-573462130EE7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "C869DAF3-7662-4EEF-98DA-11A622DEF8A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
              "matchCriteriaId": "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FF72E47-143C-47F4-B54E-7A01951C3957",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA5CC9A0-0EA9-494B-B726-0E514CADF6E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA0DFD93-BA8A-49BE-9063-E40AC757708A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors."
    }
  ],
  "id": "CVE-2006-1069",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-03-07T23:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.geeklog.net/article.php/geeklog-1.4.0sr2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/17010"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/0851"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.geeklog.net/article.php/geeklog-1.4.0sr2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17010"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0851"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.