CVE-2006-0044
Summary
| CVE | CVE-2006-0044 |
|---|---|
| State | PUBLISHED |
| Assigner | debian |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-01-18 01:51:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields". |
Risk And Classification
Primary CVSS: v2.0 7.5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Albatross | Albatross | 1.00 | All | All | All |
| Application | Albatross | Albatross | 1.01 | All | All | All |
| Application | Albatross | Albatross | 1.10 | All | All | All |
| Application | Albatross | Albatross | 1.20 | All | All | All |
| Application | Albatross | Albatross | 1.30 | All | All | All |
| Application | Albatross | Albatross | 1.32 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Secunia - Advisories - Albatross Arbitrary Command Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Patch, Vendor Advisory |
| Albatross - a Toolkit for Stateful Web Applications - Object Craft | af854a3a-2127-422b-91ae-364da2661108 | www.object-craft.com.au | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| DESCRIPTION | af854a3a-2127-422b-91ae-364da2661108 | security.debian.org | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Debian update for albatross - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Debian -- Security Information -- DSA-942-1 albatross | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | Patch, Vendor Advisory |
| www.osvdb.org/22451 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| Albatross Remote Arbitrary Code Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.