CVE-2006-4899

Published: Sep 22, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.

Affected (4)

Products: Broadcom: Etrust Security Command Center

1 product

Etrust Security Command Center

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Broadcom Etrust Security Command Center	Version 1.0
Broadcom Etrust Security Command Center	Version 8
Broadcom Etrust Security Command Center	Version 8 sp1
Broadcom Etrust Security Command Center	Version 8 sp1

References (22)

http://secunia.com/advisories/22023

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://securitytracker.com/id?1016910

Source: cve@mitre.org

http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.osvdb.org/29009

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/446611/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/446716/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20139

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3738

Source: cve@mitre.org

http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9

Source: cve@mitre.org

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29102

Source: cve@mitre.org

http://secunia.com/advisories/22023

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://securitytracker.com/id?1016910

Source: af854a3a-2127-422b-91ae-364da2661108

http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.osvdb.org/29009

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446611/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/446716/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20139

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3738

Source: af854a3a-2127-422b-91ae-364da2661108

http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/29102

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.