CVE Vulnerabilities

CVE-2006-1505

Published: Mar 30, 2006 | Modified: Mar 08, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa), when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to yes.

Affected Software

Name Vendor Start Version End Version
Base Basic_analysis_and_security_engine 1.1.2_zora 1.1.2_zora
Base Basic_analysis_and_security_engine 1.1.3_lynn 1.1.3_lynn
Base Basic_analysis_and_security_engine 1.1.4_cheryl 1.1.4_cheryl
Base Basic_analysis_and_security_engine 1.1_elizabeth 1.1_elizabeth
Base Basic_analysis_and_security_engine 1.2.1_kris 1.2.1_kris
Base Basic_analysis_and_security_engine 1.2.2_cindy 1.2.2_cindy
Base Basic_analysis_and_security_engine 1.2_betty 1.2_betty
Acidbase Ubuntu dapper *
Acidbase Ubuntu devel *
Acidbase Ubuntu edgy *
Acidbase Ubuntu feisty *
Acidbase Ubuntu gutsy *
Acidbase Ubuntu hardy *
Acidbase Ubuntu intrepid *
Acidbase Ubuntu jaunty *
Acidbase Ubuntu karmic *

References