← back
CVE-2006-3425

CVE-2006-3425

EPSS 2.3%
FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.htmlhttp://secunia.com/advisories/20876http://secunia.com/advisories/20878http://securityreason.com/securityalert/1200http://securitytracker.com/id?1016405http://www.securityfocus.com/archive/1/438710/100/0/threadedhttp://www.securityfocus.com/bid/18723http://www.vupen.com/english/advisories/2006/2595http://www.vupen.com/english/advisories/2006/2596