CERTA-2006-AVI-181

Vulnerability from certfr_avis - Published: 2006-05-04 - Updated: 2006-05-04

None

Description

De multiples vulnérabilités affectant le forum Invision Power Board ont été découvertes. Leur exploitation permet l'exécution de code arbitraire à distance.

Solution

Passer en version 2.1.5 ou appliquer le correctif pour la version 2.1.5 indiqué dans le message posté sur le forum d'Invision Power (cf. section Documentation).

Invision Power Board versions antérieures à 2.1.5. La version 2.1.5 est vulnérable si elle est antérieure au 25 avril 2006.

Impacted products
Vendor Product Description
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eInvision Power Board\u003c/SPAN\u003e versions  ant\u00e9rieures \u00e0 2.1.5. La version 2.1.5 est vuln\u00e9rable si elle est  ant\u00e9rieure au 25 avril 2006.\u003c/P\u003e",
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s affectant le forum Invision Power Board ont\n\u00e9t\u00e9 d\u00e9couvertes. Leur exploitation permet l\u0027ex\u00e9cution de code arbitraire\n\u00e0 distance.\n\n## Solution\n\nPasser en version 2.1.5 ou appliquer le correctif pour la version 2.1.5\nindiqu\u00e9 dans le message post\u00e9 sur le forum d\u0027Invision Power (cf. section\nDocumentation).\n",
  "cves": [
    {
      "name": "CVE-2006-2059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-2059"
    },
    {
      "name": "CVE-2006-2060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-2060"
    },
    {
      "name": "CVE-2006-2097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-2097"
    },
    {
      "name": "CVE-2006-2061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-2061"
    }
  ],
  "initial_release_date": "2006-05-04T00:00:00",
  "last_revision_date": "2006-05-04T00:00:00",
  "links": [
    {
      "title": "Message du 25 avril 2006 post\u00e9 sur le forum d\u0027Invision    Power :",
      "url": "http://forums.invisionpower.com/index.php?showtopic=213374"
    }
  ],
  "reference": "CERTA-2006-AVI-181",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-05-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Invision Power Board",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Message du 25 avril 2006 sur le forum d\u0027Invision Power",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.