CVE-2006-0522

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.8%

from disclosure to weapon72 days

Published on NVDFeb 2

1st PoC+72d

exploitation probability

2.8%top 15% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1680

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/18689 http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html http://securitytracker.com/id?1015561 https://exchange.xforce.ibmcloud.com/vulnerabilities/24413 http://www.osvdb.org/22883 http://www.securityfocus.com/bid/16452 http://www.vupen.com/english/advisories/2006/0402