CVE-2006-0868 : Multiple unspecified injection vulnerabilities in unspecified Auth Container bac

Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."

Published 2006-02-23 23:02:00

Updated 2018-10-18 16:29:28

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-0868

Pear » Xml Rpc » Version: 1.1.0
cpe:2.3:a:pear:xml_rpc:1.1.0:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.0
cpe:2.3:a:pear:xml_rpc:1.2.0:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.0rc7
cpe:2.3:a:pear:xml_rpc:1.2.0rc7:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.1
cpe:2.3:a:pear:xml_rpc:1.2.1:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.0.2
cpe:2.3:a:pear:xml_rpc:1.0.2:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.0rc3
cpe:2.3:a:pear:xml_rpc:1.2.0rc3:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.0rc4
cpe:2.3:a:pear:xml_rpc:1.2.0rc4:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.3.0rc3
cpe:2.3:a:pear:xml_rpc:1.3.0rc3:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.0rc1
cpe:2.3:a:pear:xml_rpc:1.2.0rc1:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.0rc2
cpe:2.3:a:pear:xml_rpc:1.2.0rc2:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.2
cpe:2.3:a:pear:xml_rpc:1.2.2:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.3.0rc1
cpe:2.3:a:pear:xml_rpc:1.3.0rc1:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.3.0rc2
cpe:2.3:a:pear:xml_rpc:1.3.0rc2:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.0.3
cpe:2.3:a:pear:xml_rpc:1.0.3:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.0.4
cpe:2.3:a:pear:xml_rpc:1.0.4:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.0rc5
cpe:2.3:a:pear:xml_rpc:1.2.0rc5:*:*:*:*:*:*:*
Matching versions
Pear » Xml Rpc » Version: 1.2.0rc6
cpe:2.3:a:pear:xml_rpc:1.2.0rc6:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-0868

EPSS FAQ

2.31%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 83 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-0868

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-0868

http://www.securityfocus.com/archive/1/425796/100/0/threaded
http://pear.php.net/package/Auth/download/1.2.4

Auth :: 1.2.4
Patch
http://www.vupen.com/english/advisories/2006/0696
http://www.securityfocus.com/bid/16758

Patch;Vendor Advisory
http://securitytracker.com/id?1015666
http://www.gentoo.org/security/en/glsa/glsa-200603-13.xml

PEAR-Auth: Potential authentication bypass (GLSA 200603-13) — Gentoo security
https://exchange.xforce.ibmcloud.com/vulnerabilities/24854

PHP PEAR::Auth module authentication injection CVE-2006-0868 Vulnerability Report
http://pear.php.net/package/Auth/download/1.3.0r4

Auth :: 1.3.0r4
Patch

Jump to

Vulnerability Details : CVE-2006-0868

Products affected by CVE-2006-0868

Exploit prediction scoring system (EPSS) score for CVE-2006-0868

CVSS scores for CVE-2006-0868

References for CVE-2006-0868