CVE-2006-4899

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.9%

from disclosure to weapon0 days

Published on NVDSep 22

1st PoCSep 21

exploitation probability

9.9%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28640

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/22023 http://securitytracker.com/id?1016910 https://exchange.xforce.ibmcloud.com/vulnerabilities/29102 http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616 http://www.osvdb.org/29009 http://www.securityfocus.com/archive/1/446611/100/0/threaded http://www.securityfocus.com/archive/1/446716/100/0/threaded http://www.securityfocus.com/bid/20139 http://www.vupen.com/english/advisories/2006/3738