CVE-2006-2948 - Vulnerability Details - OpenCVE

A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Alan Ward	A-cart

Configuration 1 [-]

cpe:2.3:a:alan_ward:a-cart:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/20508
http://securitytracker.com/id?1005171
http://www.securiteam.com/windowsntfocus/5JP081F8AY.html
http://www.securityfocus.com/archive/1/436257/100/0/threaded
http://www.securityfocus.com/bid/5597
http://www.vupen.com/english/advisories/2006/2207

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-06-12T20:00:00

Updated: 2024-08-07T18:06:27.230Z

Reserved: 2006-06-12T00:00:00

Link: CVE-2006-2948

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-06-12T20:06:00.000

Modified: 2024-11-21T00:12:28.157

Link: CVE-2006-2948

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2002-08-30T00:00:00", "descriptions": [{"lang": "en", "value": "A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1005171", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1005171"}, {"name": "20060607 bug on showwich.asp", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/436257/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://www.securiteam.com/windowsntfocus/5JP081F8AY.html"}, {"name": "5597", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/5597"}, {"name": "ADV-2006-2207", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2207"}, {"name": "20508", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20508"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-2948", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1005171", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1005171"}, {"name": "20060607 bug on showwich.asp", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/436257/100/0/threaded"}, {"name": "http://www.securiteam.com/windowsntfocus/5JP081F8AY.html", "refsource": "MISC", "url": "http://www.securiteam.com/windowsntfocus/5JP081F8AY.html"}, {"name": "5597", "refsource": "BID", "url": "http://www.securityfocus.com/bid/5597"}, {"name": "ADV-2006-2207", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2207"}, {"name": "20508", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20508"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:06:27.230Z"}, "title": "CVE Program Container", "references": [{"name": "1005171", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1005171"}, {"name": "20060607 bug on showwich.asp", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/436257/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.securiteam.com/windowsntfocus/5JP081F8AY.html"}, {"name": "5597", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/5597"}, {"name": "ADV-2006-2207", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2207"}, {"name": "20508", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20508"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-2948", "datePublished": "2006-06-12T20:00:00", "dateReserved": "2006-06-12T00:00:00", "dateUpdated": "2024-08-07T18:06:27.230Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:alan_ward:a-cart:*:*:*:*:*:*:*:*", "matchCriteriaId": "99A3E345-C3AB-47EF-B5E2-4ED2E308C7CC", "versionEndIncluding": "2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information."}], "id": "CVE-2006-2948", "lastModified": "2024-11-21T00:12:28.157", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-06-12T20:06:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20508"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1005171"}, {"source": "cve@mitre.org", "url": "http://www.securiteam.com/windowsntfocus/5JP081F8AY.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/436257/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/5597"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/2207"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20508"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1005171"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securiteam.com/windowsntfocus/5JP081F8AY.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/436257/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/5597"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/2207"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}