CVE-2006-5819

Published: Nov 18, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script.

Affected (5)

Products: Verity: Ultraseek

Verity

1 product

Ultraseek

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Verity Ultraseek	Up to 5.6.2
Verity Ultraseek	Version 5.2.1
Verity Ultraseek	Version 5.5.0
Verity Ultraseek	Version 5.6.0
Verity Ultraseek	Version 5.6.1

References (18)

http://securitytracker.com/id?1017235

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/559616

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/22892

Source: cve@mitre.org

Patch

http://www.osvdb.org/30286

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/451847/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21120

Source: cve@mitre.org

http://www.ultraseek.com/support/docs/RELNOTES.txt

Source: cve@mitre.org

Patch

http://www.zerodayinitiative.com/advisories/ZDI-06-042.html

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/30311

Source: cve@mitre.org

http://securitytracker.com/id?1017235