« Volver al listado

CVE-2006-5668

Estado: ModificadaAlta (7.5)—

Unspecified vulnerability in Ampache 3.3.2 and earlier, when register_globals is enabled, allows remote attackers to bypass security restrictions and gain guest access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Ampache — Ampache

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-5668",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-11-03T01:07:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/22842",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/20798",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4236",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29892",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://svn.ampache.org/branches/3.3.2/docs/CHANGELOG",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/22842",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/20798",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4236",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29892",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://svn.ampache.org/branches/3.3.2/docs/CHANGELOG",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Ampache 3.3.2 and earlier, when register_globals is enabled, allows remote attackers to bypass security restrictions and gain guest access."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en Ampache 3.3.2 y versiones anteriores, cuando register_globals está habilitado, permite a atacantes remotos violar restricciones de seguridad y obtener acceso de invitado."
    }
  ],
  "lastModified": "2026-06-16T22:31:38.550",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69E82750-606F-451B-AD64-C9FB59A041C5"
            },
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33900B23-7418-40A0-8D2A-27DA787FE5F1"
            },
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75BD76A1-18B8-4CA5-A5B9-6FEFA1B35475"
            },
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD247951-AC79-422C-BC2B-AB7FBCC3743D"
            },
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "298A2426-A205-482A-9C64-317D2ADA475C"
            },
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11FA99FF-D4CB-4BB9-AAF6-A3E672FFD784"
            },
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "868FBB45-E2B5-482D-97D0-E121F81A06AC"
            },
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.3.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA8B2E24-60E0-4B9E-8D04-F9FB01C80749"
            },
            {
              "criteria": "cpe:2.3:a:ampache:ampache:3.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D24599CC-7810-49B5-B750-AF189F489333"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}