Home > Vulnerability Database > CVE-2006-1505

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-1505

Date: March 29, 2006

base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa), when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to "yes".

Severity Score

5.3

Related Resources (8)

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-1505

Url: http://www.securityfocus.com/bid/17354

Url: http://cvs.sourceforge.net/viewcvs.py/secureideas/base-php4/docs/CHANGELOG?rev=1.233&view=markup

Url: http://www.osvdb.org/24101

Url: http://www.vupen.com/english/advisories/2006/1192

Url: http://secunia.com/advisories/19510

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-1505

Url: https://www.mend.io/vulnerability-database/CVE-2006-1505

Severity Score

5.3

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us