« Volver al listado

CVE-2006-5443

Estado: ModificadaMedia (5)—

Unspecified vulnerability in XIAO Gang WWW Interactive Mathematics Server (WIMS) before 3.60 allows remote attackers to modify unspecified data via unspecified vectors involving "variable rights."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Xiao Gang — WWW Interactive Mathematics Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-5443",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-10-23T17:07:00.000",
  "references": [
    {
      "url": "http://freshmeat.net/projects/wims/?branch_id=11538&release_id=238917",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/22415",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4108",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29668",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://freshmeat.net/projects/wims/?branch_id=11538&release_id=238917",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/22415",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4108",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29668",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in XIAO Gang WWW Interactive Mathematics Server (WIMS) before 3.60 allows remote attackers to modify unspecified data via unspecified vectors involving \"variable rights.\""
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en XIAO Gang WWW Interactive Mathematics Server (WIMS) anterior a 3.60 permite a atacantes remotos modificar datos no especificados mediante vectores no especificados relacionados con \"derechos variables\"."
    }
  ],
  "lastModified": "2026-06-16T22:31:12.373",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "877D905B-336C-4F11-995A-1A9998E12D1E",
              "versionEndIncluding": "3.56"
            },
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87A4F850-D764-47FC-8E94-E09610992F6F"
            },
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.42:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E2AE12D-EE49-4596-9D20-254847B06A72"
            },
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.44:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB6C8819-AA85-428B-B074-B9FE9F5263F1"
            },
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.46:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82B3582B-1A17-4F33-BBE6-9E6D5B2045DD"
            },
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.48:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C5F35DF-0157-49E8-8674-4B5145290CEC"
            },
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4F9D737-D16A-465A-AD00-5654DC2E7EA0"
            },
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2720D11-CAAD-4949-9470-941907FFAE18"
            },
            {
              "criteria": "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.54:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79496C31-102C-4380-A02F-D646F26DC858"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nXIAO Gang, WWW Interactive Mathematics Server, 3.60"
}