CVE-2006-1182 - Vulnerability Details - OpenCVE

Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the (1) saveContent or (2) saveOptimized ADS commands, or the (3) loadContent command.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity High

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Adobe	Document Server Graphics Server

Configuration 1 [-]

OR	cpe:2.3:a:adobe:document_server:5.0:::::::*
	cpe:2.3:a:adobe:document_server:6.0:::::::*
	cpe:2.3:a:adobe:graphics_server:2.0:::::::*
	cpe:2.3:a:adobe:graphics_server:2.1:::::::*

No data.

References

Link	Providers
http://secunia.com/advisories/19229
http://securityreason.com/securityalert/588
http://securitytracker.com/id?1015768
http://securitytracker.com/id?1015769
http://www.adobe.com/support/techdocs/332989.html
http://www.osvdb.org/23924
http://www.securityfocus.com/archive/1/427730/100/0/threaded
http://www.securityfocus.com/bid/17113
http://www.vupen.com/english/advisories/2006/0956
https://exchange.xforce.ibmcloud.com/vulnerabilities/25247

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-03-16T01:00:00

Updated: 2024-08-07T17:03:28.211Z

Reserved: 2006-03-12T00:00:00

Link: CVE-2006-1182

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-03-16T01:02:00.000

Modified: 2024-11-21T00:08:15.120

Link: CVE-2006-1182

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-03-15T00:00:00", "descriptions": [{"lang": "en", "value": "Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the (1) saveContent or (2) saveOptimized ADS commands, or the (3) loadContent command."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1015769", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015769"}, {"name": "ADV-2006-0956", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/0956"}, {"name": "adobe-unauth-command-access(25247)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25247"}, {"name": "17113", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17113"}, {"name": "23924", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/23924"}, {"name": "20060315 Secunia Research: Adobe Document/Graphics Server File URI ResourceAccess", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/427730/100/0/threaded"}, {"name": "1015768", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015768"}, {"name": "19229", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19229"}, {"name": "588", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/588"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.adobe.com/support/techdocs/332989.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-1182", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the (1) saveContent or (2) saveOptimized ADS commands, or the (3) loadContent command."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1015769", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015769"}, {"name": "ADV-2006-0956", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/0956"}, {"name": "adobe-unauth-command-access(25247)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25247"}, {"name": "17113", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17113"}, {"name": "23924", "refsource": "OSVDB", "url": "http://www.osvdb.org/23924"}, {"name": "20060315 Secunia Research: Adobe Document/Graphics Server File URI ResourceAccess", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/427730/100/0/threaded"}, {"name": "1015768", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015768"}, {"name": "19229", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19229"}, {"name": "588", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/588"}, {"name": "http://www.adobe.com/support/techdocs/332989.html", "refsource": "CONFIRM", "url": "http://www.adobe.com/support/techdocs/332989.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:03:28.211Z"}, "title": "CVE Program Container", "references": [{"name": "1015769", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015769"}, {"name": "ADV-2006-0956", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/0956"}, {"name": "adobe-unauth-command-access(25247)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25247"}, {"name": "17113", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17113"}, {"name": "23924", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/23924"}, {"name": "20060315 Secunia Research: Adobe Document/Graphics Server File URI ResourceAccess", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/427730/100/0/threaded"}, {"name": "1015768", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015768"}, {"name": "19229", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19229"}, {"name": "588", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/588"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.adobe.com/support/techdocs/332989.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-1182", "datePublished": "2006-03-16T01:00:00", "dateReserved": "2006-03-12T00:00:00", "dateUpdated": "2024-08-07T17:03:28.211Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:document_server:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "5134806E-933A-420A-AE8B-F8A4491C21B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:document_server:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "2BD4A8E3-DF14-43DE-9B36-52A82B8E8869", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:graphics_server:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "2855B3E0-230A-407A-8B20-05BA79084C82", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:graphics_server:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "0404AFA3-6E18-40FA-9DA8-AD33F023CD49", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the (1) saveContent or (2) saveOptimized ADS commands, or the (3) loadContent command."}], "id": "CVE-2006-1182", "lastModified": "2024-11-21T00:08:15.120", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 1.9, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-03-16T01:02:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/19229"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/588"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015768"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://securitytracker.com/id?1015769"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.adobe.com/support/techdocs/332989.html"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/23924"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/427730/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/17113"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/0956"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25247"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/19229"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/588"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015768"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://securitytracker.com/id?1015769"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.adobe.com/support/techdocs/332989.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/23924"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/427730/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/17113"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/0956"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25247"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}