Vulnerabilities > CVE-2006-0868 - Unspecified vulnerability in Pear XML RPC

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
pear
nessus
NVD
Published: 2006-02-23
Updated: 2024-11-21

Summary

Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."

Vulnerable Configurations

Part Description Count
Application
Pear
17

Nessus

NASL familyGentoo Local Security Checks
NASL idGENTOO_GLSA-200603-13.NASL
descriptionThe remote host is affected by the vulnerability described in GLSA-200603-13 (PEAR-Auth: Potential authentication bypass) Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact : A remote attacker could possibly exploit this vulnerability to bypass the authentication mechanism by injecting specially crafted input to the underlying storage containers. Workaround : There is no known workaround at this time.
last seen2020-06-01
modified2020-06-02
plugin id21094
published2006-03-18
reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/21094
titleGLSA-200603-13 : PEAR-Auth: Potential authentication bypass

References