CVE-2006-3425

FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require…

published July 7, 2006

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02333 · 83.4th percentile
Published
2006-07-07T00:00Z
EPSS history
Timeline
  • 07 JUL 00:00Z
    FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require…
    cvelistv5