CVE-2006-1788

Опубликовано: 13 апр. 2006

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether the user ID is valid or invalid, which allows remote attackers to more easily identify valid user IDs via brute force attacks.

Ссылки

http://secunia.com/advisories/15924
Vendor Advisory
http://secunia.com/secunia_research/2005-68/advisory/
Vendor Advisory
http://www.adobe.com/support/techdocs/331917.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/430869/100/0/threaded
http://www.securityfocus.com/bid/17500
http://www.vupen.com/english/advisories/2006/1342
https://exchange.xforce.ibmcloud.com/vulnerabilities/25772
http://secunia.com/advisories/15924
Vendor Advisory
http://secunia.com/secunia_research/2005-68/advisory/
Vendor Advisory
http://www.adobe.com/support/techdocs/331917.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/430869/100/0/threaded
http://www.securityfocus.com/bid/17500
http://www.vupen.com/english/advisories/2006/1342
https://exchange.xforce.ibmcloud.com/vulnerabilities/25772

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:adobe:document_server:6.0:*:reader_extensions:*:*:*:*:*

EPSS

Процентиль: 84%

0.02135

Низкий

2.6 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4v5g-qj5x-c7jp

github

почти 4 года назад