« Volver al listado

CVE-2006-4200

Estado: ModificadaAlta (7.5)—

Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authentication via unspecified vectors related to request processing.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Soft3304 — 04webserver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-4200",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-08-17T21:04:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/21504",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/19496",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.soft3304.net/04WebServer/Security.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28355",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21504",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/19496",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.soft3304.net/04WebServer/Security.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28355",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authentication via unspecified vectors related to request processing."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en 04WebServer 1.83 y anteriores permite a atacantes remotos evitar la autenticación de usuario a través de vectores no especificados relacionados con el procesado de peticiones."
    }
  ],
  "lastModified": "2026-06-16T22:28:36.133",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:soft3304:04webserver:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD6A4346-711A-47BC-A941-0BA545E03508",
              "versionEndIncluding": "1.83"
            },
            {
              "criteria": "cpe:2.3:a:soft3304:04webserver:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC23605E-6603-443F-90F7-A44B60E4BCF3"
            },
            {
              "criteria": "cpe:2.3:a:soft3304:04webserver:1.42:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6068B76-8085-4942-9872-D69E82AF9D19"
            },
            {
              "criteria": "cpe:2.3:a:soft3304:04webserver:1.81:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EF54719-2DDC-4900-871B-B2052841CF1A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nSoft3304, 04WebServer, 1.84"
}