CVE-2006-1069 Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges a...
HighCVSS 10.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geeklog | = 1.3.9 | No fix listed |
| geeklog | = 1.3.9_sr1 | No fix listed |
| geeklog | = 1.3.9_sr2 | No fix listed |
| geeklog | = 1.3.9_sr3 | No fix listed |
| geeklog | = 1.3.9_sr4 | No fix listed |
| geeklog | = 1.3.11 | No fix listed |
| geeklog | = 1.3.11_sr1 | No fix listed |
| geeklog | = 1.3.11_sr2 | No fix listed |
| geeklog | = 1.3.11_sr3 | No fix listed |
| geeklog | = 1.3.11_sr4 | No fix listed |
| geeklog | = 1.4.0 | No fix listed |
| geeklog | = 1.4.0_sr1 | No fix listed |
References
- www.geeklog.net patch
- 17010 vdb-entry
- ADV-2006-0851 vdb-entry