Search
Find a vulnerability
Search criteria
2 vulnerabilities by netrik
CVE-2006-6678 (GCVE-0-2006-6678)
Vulnerability from nvd – Published: 2006-12-21 01:00 – Updated: 2024-08-07 20:33
VLAI
EPSS
VEX
Summary
The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.debian.org/security/2007/dsa-1251 | vendor-advisoryx_refsource_DEBIAN |
| http://www.securityfocus.com/bid/22158 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2006/5092 | vdb-entryx_refsource_VUPEN |
| http://netrik.cvs.sourceforge.net/netrik/netrik/f… | x_refsource_MISC |
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_CONFIRM |
| http://secunia.com/advisories/23822 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-12-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:33:59.604Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "DSA-1251",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2007/dsa-1251"
},
{
"name": "22158",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/22158"
},
{
"name": "ADV-2006-5092",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5092"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3\u0026r2=1.4"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=472131\u0026group_id=23183"
},
{
"name": "23822",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23822"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-01-30T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "DSA-1251",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2007/dsa-1251"
},
{
"name": "22158",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/22158"
},
{
"name": "ADV-2006-5092",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5092"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3\u0026r2=1.4"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=472131\u0026group_id=23183"
},
{
"name": "23822",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23822"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6678",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "DSA-1251",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2007/dsa-1251"
},
{
"name": "22158",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/22158"
},
{
"name": "ADV-2006-5092",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5092"
},
{
"name": "http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3\u0026r2=1.4",
"refsource": "MISC",
"url": "http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3\u0026r2=1.4"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=472131\u0026group_id=23183",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=472131\u0026group_id=23183"
},
{
"name": "23822",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23822"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6678",
"datePublished": "2006-12-21T01:00:00.000Z",
"dateReserved": "2006-12-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:33:59.604Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6678 (GCVE-0-2006-6678)
Vulnerability from cvelistv5 – Published: 2006-12-21 01:00 – Updated: 2024-08-07 20:33
VLAI
EPSS
VEX
Summary
The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.debian.org/security/2007/dsa-1251 | vendor-advisoryx_refsource_DEBIAN |
| http://www.securityfocus.com/bid/22158 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2006/5092 | vdb-entryx_refsource_VUPEN |
| http://netrik.cvs.sourceforge.net/netrik/netrik/f… | x_refsource_MISC |
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_CONFIRM |
| http://secunia.com/advisories/23822 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-12-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:33:59.604Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "DSA-1251",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2007/dsa-1251"
},
{
"name": "22158",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/22158"
},
{
"name": "ADV-2006-5092",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5092"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3\u0026r2=1.4"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=472131\u0026group_id=23183"
},
{
"name": "23822",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23822"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-01-30T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "DSA-1251",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2007/dsa-1251"
},
{
"name": "22158",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/22158"
},
{
"name": "ADV-2006-5092",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5092"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3\u0026r2=1.4"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=472131\u0026group_id=23183"
},
{
"name": "23822",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23822"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6678",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "DSA-1251",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2007/dsa-1251"
},
{
"name": "22158",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/22158"
},
{
"name": "ADV-2006-5092",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/5092"
},
{
"name": "http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3\u0026r2=1.4",
"refsource": "MISC",
"url": "http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3\u0026r2=1.4"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=472131\u0026group_id=23183",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=472131\u0026group_id=23183"
},
{
"name": "23822",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23822"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6678",
"datePublished": "2006-12-21T01:00:00.000Z",
"dateReserved": "2006-12-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:33:59.604Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}