Search
Find a vulnerability
Search criteria
4 vulnerabilities found for egatherer by ibm
CVE-2006-4221 (GCVE-0-2006-4221)
Vulnerability from nvd – Published: 2006-08-18 19:55 – Updated: 2024-08-07 18:57
VLAI
EPSS
VEX
Summary
Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
10 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/444899/100… | mailing-listx_refsource_BUGTRAQ |
| http://securitytracker.com/id?1016705 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/1424 | third-party-advisoryx_refsource_SREASON |
| http://www.eeye.com/html/research/advisories/AD20… | x_refsource_MISC |
| http://www.vupen.com/english/advisories/2006/3305 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/21528 | third-party-advisoryx_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/380277 | third-party-advisoryx_refsource_CERT-VN |
| http://www.securityfocus.com/archive/1/443471/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/19554 | vdb-entryx_refsource_BID |
Date Public
2006-08-16 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T18:57:46.513Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20060829 [ISR] - IBM eGatherer ActiveX Code Execution PoC",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/444899/100/100/threaded"
},
{
"name": "1016705",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016705"
},
{
"name": "egatherer-activex-runegatherer-bo(28418)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28418"
},
{
"name": "1424",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1424"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.eeye.com/html/research/advisories/AD20060816.html"
},
{
"name": "ADV-2006-3305",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/3305"
},
{
"name": "21528",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21528"
},
{
"name": "VU#380277",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/380277"
},
{
"name": "20060816 [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/443471/100/0/threaded"
},
{
"name": "19554",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19554"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-08-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20060829 [ISR] - IBM eGatherer ActiveX Code Execution PoC",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/444899/100/100/threaded"
},
{
"name": "1016705",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016705"
},
{
"name": "egatherer-activex-runegatherer-bo(28418)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28418"
},
{
"name": "1424",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1424"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.eeye.com/html/research/advisories/AD20060816.html"
},
{
"name": "ADV-2006-3305",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/3305"
},
{
"name": "21528",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21528"
},
{
"name": "VU#380277",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/380277"
},
{
"name": "20060816 [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/443471/100/0/threaded"
},
{
"name": "19554",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19554"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-4221",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20060829 [ISR] - IBM eGatherer ActiveX Code Execution PoC",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/444899/100/100/threaded"
},
{
"name": "1016705",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016705"
},
{
"name": "egatherer-activex-runegatherer-bo(28418)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28418"
},
{
"name": "1424",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1424"
},
{
"name": "http://www.eeye.com/html/research/advisories/AD20060816.html",
"refsource": "MISC",
"url": "http://www.eeye.com/html/research/advisories/AD20060816.html"
},
{
"name": "ADV-2006-3305",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/3305"
},
{
"name": "21528",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21528"
},
{
"name": "VU#380277",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/380277"
},
{
"name": "20060816 [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/443471/100/0/threaded"
},
{
"name": "19554",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19554"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-4221",
"datePublished": "2006-08-18T19:55:00.000Z",
"dateReserved": "2006-08-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T18:57:46.513Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-2663 (GCVE-0-2004-2663)
Vulnerability from nvd – Published: 2006-08-18 19:55 – Updated: 2024-08-08 01:36
VLAI
EPSS
VEX
Summary
The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.eeye.com/html/research/advisories/AD20… | x_refsource_MISC |
| http://marc.info/?l=bugtraq&m=108746693619324&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/11072 | third-party-advisoryx_refsource_SECUNIA |
| http://marc.info/?l=full-disclosure&m=10874155760… | mailing-listx_refsource_FULLDISC |
| http://www.osvdb.org/7090 | vdb-entryx_refsource_OSVDB |
| http://research.eeye.com/html/advisories/publishe… | third-party-advisoryx_refsource_EEYE |
| http://www.securityfocus.com/bid/10562 | vdb-entryx_refsource_BID |
Date Public
2004-06-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:36:24.872Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ibm-egatherer-execute-code(16428)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16428"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.eeye.com/html/research/advisories/AD20040615B.html"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=108746693619324\u0026w=2"
},
{
"name": "11072",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/11072"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108741557604568\u0026w=2"
},
{
"name": "7090",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/7090"
},
{
"name": "AD20040615B",
"tags": [
"third-party-advisory",
"x_refsource_EEYE",
"x_transferred"
],
"url": "http://research.eeye.com/html/advisories/published/AD20040615B.html"
},
{
"name": "10562",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/10562"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-06-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ibm-egatherer-execute-code(16428)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16428"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.eeye.com/html/research/advisories/AD20040615B.html"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=108746693619324\u0026w=2"
},
{
"name": "11072",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/11072"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108741557604568\u0026w=2"
},
{
"name": "7090",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/7090"
},
{
"name": "AD20040615B",
"tags": [
"third-party-advisory",
"x_refsource_EEYE"
],
"url": "http://research.eeye.com/html/advisories/published/AD20040615B.html"
},
{
"name": "10562",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/10562"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2663",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ibm-egatherer-execute-code(16428)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16428"
},
{
"name": "http://www.eeye.com/html/research/advisories/AD20040615B.html",
"refsource": "MISC",
"url": "http://www.eeye.com/html/research/advisories/AD20040615B.html"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=108746693619324\u0026w=2"
},
{
"name": "11072",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/11072"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=108741557604568\u0026w=2"
},
{
"name": "7090",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/7090"
},
{
"name": "AD20040615B",
"refsource": "EEYE",
"url": "http://research.eeye.com/html/advisories/published/AD20040615B.html"
},
{
"name": "10562",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/10562"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2663",
"datePublished": "2006-08-18T19:55:00.000Z",
"dateReserved": "2006-08-18T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:36:24.872Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-2663 (GCVE-0-2004-2663)
Vulnerability from cvelistv5 – Published: 2006-08-18 19:55 – Updated: 2024-08-08 01:36
VLAI
EPSS
VEX
Summary
The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.eeye.com/html/research/advisories/AD20… | x_refsource_MISC |
| http://marc.info/?l=bugtraq&m=108746693619324&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/11072 | third-party-advisoryx_refsource_SECUNIA |
| http://marc.info/?l=full-disclosure&m=10874155760… | mailing-listx_refsource_FULLDISC |
| http://www.osvdb.org/7090 | vdb-entryx_refsource_OSVDB |
| http://research.eeye.com/html/advisories/publishe… | third-party-advisoryx_refsource_EEYE |
| http://www.securityfocus.com/bid/10562 | vdb-entryx_refsource_BID |
Date Public
2004-06-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:36:24.872Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ibm-egatherer-execute-code(16428)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16428"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.eeye.com/html/research/advisories/AD20040615B.html"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=108746693619324\u0026w=2"
},
{
"name": "11072",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/11072"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108741557604568\u0026w=2"
},
{
"name": "7090",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/7090"
},
{
"name": "AD20040615B",
"tags": [
"third-party-advisory",
"x_refsource_EEYE",
"x_transferred"
],
"url": "http://research.eeye.com/html/advisories/published/AD20040615B.html"
},
{
"name": "10562",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/10562"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-06-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ibm-egatherer-execute-code(16428)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16428"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.eeye.com/html/research/advisories/AD20040615B.html"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=108746693619324\u0026w=2"
},
{
"name": "11072",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/11072"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108741557604568\u0026w=2"
},
{
"name": "7090",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/7090"
},
{
"name": "AD20040615B",
"tags": [
"third-party-advisory",
"x_refsource_EEYE"
],
"url": "http://research.eeye.com/html/advisories/published/AD20040615B.html"
},
{
"name": "10562",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/10562"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2663",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ibm-egatherer-execute-code(16428)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16428"
},
{
"name": "http://www.eeye.com/html/research/advisories/AD20040615B.html",
"refsource": "MISC",
"url": "http://www.eeye.com/html/research/advisories/AD20040615B.html"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=108746693619324\u0026w=2"
},
{
"name": "11072",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/11072"
},
{
"name": "20040616 \"IBM Access Support\" (eGatherer) Activex Dangerous Methods Vulnerability",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=108741557604568\u0026w=2"
},
{
"name": "7090",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/7090"
},
{
"name": "AD20040615B",
"refsource": "EEYE",
"url": "http://research.eeye.com/html/advisories/published/AD20040615B.html"
},
{
"name": "10562",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/10562"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2663",
"datePublished": "2006-08-18T19:55:00.000Z",
"dateReserved": "2006-08-18T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:36:24.872Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-4221 (GCVE-0-2006-4221)
Vulnerability from cvelistv5 – Published: 2006-08-18 19:55 – Updated: 2024-08-07 18:57
VLAI
EPSS
VEX
Summary
Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
10 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/444899/100… | mailing-listx_refsource_BUGTRAQ |
| http://securitytracker.com/id?1016705 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/1424 | third-party-advisoryx_refsource_SREASON |
| http://www.eeye.com/html/research/advisories/AD20… | x_refsource_MISC |
| http://www.vupen.com/english/advisories/2006/3305 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/21528 | third-party-advisoryx_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/380277 | third-party-advisoryx_refsource_CERT-VN |
| http://www.securityfocus.com/archive/1/443471/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/19554 | vdb-entryx_refsource_BID |
Date Public
2006-08-16 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T18:57:46.513Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20060829 [ISR] - IBM eGatherer ActiveX Code Execution PoC",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/444899/100/100/threaded"
},
{
"name": "1016705",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016705"
},
{
"name": "egatherer-activex-runegatherer-bo(28418)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28418"
},
{
"name": "1424",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1424"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.eeye.com/html/research/advisories/AD20060816.html"
},
{
"name": "ADV-2006-3305",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/3305"
},
{
"name": "21528",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21528"
},
{
"name": "VU#380277",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/380277"
},
{
"name": "20060816 [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/443471/100/0/threaded"
},
{
"name": "19554",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19554"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-08-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20060829 [ISR] - IBM eGatherer ActiveX Code Execution PoC",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/444899/100/100/threaded"
},
{
"name": "1016705",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016705"
},
{
"name": "egatherer-activex-runegatherer-bo(28418)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28418"
},
{
"name": "1424",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1424"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.eeye.com/html/research/advisories/AD20060816.html"
},
{
"name": "ADV-2006-3305",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/3305"
},
{
"name": "21528",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21528"
},
{
"name": "VU#380277",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/380277"
},
{
"name": "20060816 [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/443471/100/0/threaded"
},
{
"name": "19554",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19554"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-4221",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20060829 [ISR] - IBM eGatherer ActiveX Code Execution PoC",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/444899/100/100/threaded"
},
{
"name": "1016705",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016705"
},
{
"name": "egatherer-activex-runegatherer-bo(28418)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28418"
},
{
"name": "1424",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1424"
},
{
"name": "http://www.eeye.com/html/research/advisories/AD20060816.html",
"refsource": "MISC",
"url": "http://www.eeye.com/html/research/advisories/AD20060816.html"
},
{
"name": "ADV-2006-3305",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/3305"
},
{
"name": "21528",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21528"
},
{
"name": "VU#380277",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/380277"
},
{
"name": "20060816 [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/443471/100/0/threaded"
},
{
"name": "19554",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19554"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-4221",
"datePublished": "2006-08-18T19:55:00.000Z",
"dateReserved": "2006-08-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T18:57:46.513Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}