CVE-2006-2357

Published: May 15, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp.

Affected (2)

Products: Ipswitch: Whatsup Professional

Ipswitch

1 product

Whatsup Professional

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ipswitch Whatsup Professional	Version 2006
Ipswitch Whatsup Professional	Version 2006_premium

References (10)

http://secunia.com/advisories/20075

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/897

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/433808

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1787

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26506

Source: cve@mitre.org

http://secunia.com/advisories/20075