CVE-2006-0864

Published: Feb 23, 2006Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value.

Affected (1)

Products: Hauri: Virobot

Hauri

1 product

Virobot

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hauri Virobot	Version 2.0_2005-08-17

References (14)

http://secunia.com/advisories/18974

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015658

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/425788/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16768

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0691

Source: cve@mitre.org

http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24850

Source: cve@mitre.org

http://secunia.com/advisories/18974