CVE-2006-5725

Published: Nov 4, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories.

Affected (1)

Products: Aep Networks: Smartgate Ssl Server

Aep Networks

1 product

Smartgate Ssl Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aep Networks Smartgate Ssl Server	Version 4.3b

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://secunia.com/advisories/22550

Source: cve@mitre.org

PatchVendor Advisory

http://www.vupen.com/english/advisories/2006/4224

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/29802

Source: cve@mitre.org

https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c

Source: cve@mitre.org

Exploit

https://www.exploit-db.com/exploits/2637

Source: cve@mitre.org

http://secunia.com/advisories/22550