CVE-2006-2918

CVE-2006-2918

Medium · published June 24, 2006

CVSS v2.0
5.0
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number."

The record
Technical detail
CVSS v2.0
5.0 · MEDIUM
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS v4.0
Not supplied
EPSS
0.01576 · 75.3th percentile
Published
2006-06-24T01:06Z
Affected products (1)
ProductVersionsFixed in
lanap_botdetect/captcha_asp.netall versions—
References (16)
http://secunia.com/advisories/20830 · [email protected]http://securityreason.com/securityalert/1139 · [email protected]http://securitytracker.com/id?1016371 · [email protected]http://www.securityfocus.com/archive/1/438159/100/0/threaded · [email protected]http://www.securityfocus.com/bid/18315 · [email protected]http://www.symantec.com/enterprise/research/SYMSA-2006-005.txt · [email protected]http://www.vupen.com/english/advisories/2006/2518 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/27409 · [email protected]http://secunia.com/advisories/20830 · af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/1139 · af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016371 · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/438159/100/0/threaded · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/18315 · af854a3a-2127-422b-91ae-364da2661108http://www.symantec.com/enterprise/research/SYMSA-2006-005.txt · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2518 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27409 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 23 JUN 21:00Z
    The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for…
    cvelistv5