Vulnerabilities > CVE-2006-0845 - Remote Security vulnerability in Leif M. Wright web Blog 3.5

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

leif-m-wright

NVD

Published: 2006-02-22

Updated: 2017-07-20

Summary

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname.

Vulnerable Configurations

Part	Description	Count
Application	Leif_M._Wright Leif M. Wright WEB Blog 3.5	1

Packetstorm

data source	https://packetstormsecurity.com/files/download/44315/EV0082.txt
id	PACKETSTORM:44315
last seen	2016-12-05
published	2006-03-03
reporter	Aliaksandr Hartsuyeu
source	https://packetstormsecurity.com/files/44315/EV0082.txt.html
title	EV0082.txt

References

http://secunia.com/advisories/18923
http://securityreason.com/securityalert/522
http://www.evuln.com/vulns/82/summary.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/24757