{"api_version":"1","generated_at":"2026-07-23T12:03:39+00:00","cve":"CVE-2006-4899","urls":{"html":"https://cve.report/CVE-2006-4899","api":"https://cve.report/api/cve/CVE-2006-4899.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4899","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4899"},"summary":{"title":"CVE-2006-4899","description":"The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a \"'\" (single quote) in the PIProfile function, which leaks the path in an error message.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-09-22 22:07:00","updated_at":"2021-04-09 16:21:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt","name":"http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt","refsource":"MISC","tags":["Exploit","Patch","Vendor Advisory"],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/20139","name":"20139","refsource":"BID","tags":[],"title":"CA eTrust Security Command Center and eTrust Audit Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616","name":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616","refsource":"CONFIRM","tags":[],"title":"CA eTrust Security Command Center reveal web server path vulnerability - CA","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3738","name":"ADV-2006-3738","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22023","name":"22023","refsource":"SECUNIA","tags":["Exploit","Patch","Vendor Advisory"],"title":"CA eTrust Security Command Center Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29102","name":"ca-etrust-eppiservlet-path-disclosure(29102)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016910","name":"1016910","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - CA eTrust Security Command Center Lets Remote Authenticated Users Read/Delete Files and Lets Remote Users Conduct Replay Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/29009","name":"29009","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9","name":"http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9","refsource":"CONFIRM","tags":[],"title":"IT Management software and solutions from CA","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446611/100/0/threaded","name":"20060921 [CAID 34616, 34617, 34618]: CA eSCC and eTrust Audit vulnerabilities","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446716/100/0/threaded","name":"20060922 RE: Computer Associates eTrust Security Command Center Multiple Vulnerabilities","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4899","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4899","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"broadcom","cpe5":"etrust_security_command_center","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"broadcom","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"broadcom","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"sp1","cpe8":"cr1","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"broadcom","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"sp1","cpe8":"cr2","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"etrust_security_command_center","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"sp1","cpe8":"cr1","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"sp1","cpe8":"cr2","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"etrust_security_command_center","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"sp1","cpe8":"cr1","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4899","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"etrust_security_command_center","cpe6":"8","cpe7":"sp1","cpe8":"cr2","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4899","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a \"'\" (single quote) in the PIProfile function, which leaks the path in an error message."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt","refsource":"MISC","url":"http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt"},{"name":"ca-etrust-eppiservlet-path-disclosure(29102)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29102"},{"name":"http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9","refsource":"CONFIRM","url":"http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9"},{"name":"29009","refsource":"OSVDB","url":"http://www.osvdb.org/29009"},{"name":"1016910","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016910"},{"name":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616","refsource":"CONFIRM","url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616"},{"name":"22023","refsource":"SECUNIA","url":"http://secunia.com/advisories/22023"},{"name":"20139","refsource":"BID","url":"http://www.securityfocus.com/bid/20139"},{"name":"20060922 RE: Computer Associates eTrust Security Command Center Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446716/100/0/threaded"},{"name":"20060921 [CAID 34616, 34617, 34618]: CA eSCC and eTrust Audit vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446611/100/0/threaded"},{"name":"ADV-2006-3738","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3738"}]}},"nvd":{"publishedDate":"2006-09-22 22:07:00","lastModifiedDate":"2021-04-09 16:21:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5},"severity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:broadcom:etrust_security_command_center:1.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr1:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr2:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:broadcom:etrust_security_command_center:8:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4899","Ordinal":"20239","Title":"CVE-2006-4899","CVE":"CVE-2006-4899","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4899","Ordinal":"1","NoteData":"The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a \"'\" (single quote) in the PIProfile function, which leaks the path in an error message.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4899","Ordinal":"2","NoteData":"2006-09-22","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4899","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}