Vulnerability Details CVE-2006-0864
filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.032
EPSS Ranking 86.4%
CVSS Severity
CVSS v2 Score 10.0
References
- http://secunia.com/advisories/18974
- http://securitytracker.com/id?1015658
- http://www.securityfocus.com/archive/1/425788/100/0/threaded
- http://www.securityfocus.com/bid/16768
- http://www.vupen.com/english/advisories/2006/0691
- http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24850
- http://secunia.com/advisories/18974
- http://securitytracker.com/id?1015658
- http://www.securityfocus.com/archive/1/425788/100/0/threaded
- http://www.securityfocus.com/bid/16768
- http://www.vupen.com/english/advisories/2006/0691
- http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24850