CVE-2006-6834

Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to (1) "unneeded legacy functions" and (2) "Several low level security fixes."

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://jvn.jp/jp/JVN%2345006961/index.html
http://secunia.com/advisories/23563	Patch Vendor Advisory
http://www.joomla.org/content/view/2446/1/
http://www.joomla.org/content/view/2495/78/
http://www.securityfocus.com/bid/21810	Patch
http://www.vupen.com/english/advisories/2006/5202

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:joomla:joomla:1.0:::::::*
	cpe:2.3:a:joomla:joomla:1.0.1:::::::*
	cpe:2.3:a:joomla:joomla:1.0.2:::::::*
	cpe:2.3:a:joomla:joomla:1.0.3:::::::*
	cpe:2.3:a:joomla:joomla:1.0.4:::::::*
	cpe:2.3:a:joomla:joomla:1.0.5:::::::*
	cpe:2.3:a:joomla:joomla:1.0.7:::::::*
	cpe:2.3:a:joomla:joomla:1.0.8:::::::*
	cpe:2.3:a:joomla:joomla:1.0.9:::::::*
	cpe:2.3:a:joomla:joomla:1.0.10:::::::*
	cpe:2.3:a:joomla:joomla:1.0.11:::::::*

History

No history.

Information

Published : 2006-12-31 05:00

Updated : 2011-03-08 02:47

NVD link : CVE-2006-6834

Mitre link : CVE-2006-6834

CVE.ORG link : CVE-2006-6834

JSON object : View

Products Affected

joomla

joomla

CWE

NVD-CWE-Other

{"id": "CVE-2006-6834", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": true}]}, "published": "2006-12-31T05:00:00.000", "references": [{"url": "http://jvn.jp/jp/JVN%2345006961/index.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23563", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.joomla.org/content/view/2446/1/", "source": "cve@mitre.org"}, {"url": "http://www.joomla.org/content/view/2495/78/", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/21810", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/5202", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to (1) \"unneeded legacy functions\" and (2) \"Several low level security fixes.\""}, {"lang": "es", "value": "M\u00fatiples vulnerabilidades no especificadas en Joomla! anterior a 1.0.12 tienen un impacto desconocido y ataca vectores relacionados con (1) \"funciones innecesarias de herencia\" y (2) \"Varias soluciones de seguridad de nivel bajo.\""}], "lastModified": "2011-03-08T02:47:08.547", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9709F901-EDD2-4369-89F0-8AF3A63655E5"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89946AA1-0694-44A5-962E-ED36B4BFCE9C"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05C21464-3FD4-4528-A512-7C0DE70E331C"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4007FCB-589A-413D-8009-64404926CA7B"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6B0B037-5E62-4069-AF35-F05A777E05D8"}, {"criteria": "cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "314E12E1-107E-4AB3-8092-9F6C2C5FA11B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}