CVE-2006-1627
First published: Thu Apr 13 2006(Updated: )
Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the (1) actionID and (2) pageID parameters. NOTE: due to an error during reservation, this identifier was inadvertently associated with multiple issues. Other CVE identifiers have been assigned to handle other problems that are covered by the same disclosure.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/secunia_research/2005-68/advisory/
- http://www.adobe.com/support/techdocs/322699.html
- http://secunia.com/advisories/15924
- http://www.securityfocus.com/bid/17500
- http://securitytracker.com/id?1015905
- http://www.vupen.com/english/advisories/2006/1342
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25769
- http://www.securityfocus.com/archive/1/430869/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-1627?
CVE-2006-1627 is classified as a medium severity vulnerability due to improper access controls.
How do I fix CVE-2006-1627?
To fix CVE-2006-1627, upgrade Adobe Document Server for Reader Extensions to a version that provides proper access control.
What types of systems are affected by CVE-2006-1627?
CVE-2006-1627 affects systems running Adobe Acrobat Reader with Reader Extensions version 6.0 and lower.
What are the potential risks of CVE-2006-1627?
The potential risks of CVE-2006-1627 include unauthorized access and privilege escalation by authenticated users.
Can CVE-2006-1627 be exploited remotely?
Yes, CVE-2006-1627 can be exploited remotely by authenticated users who can modify specific parameters.
- collector/nvd-historical
- vendor/adobe
- product/acrobat reader
- canonical/adobe acrobat reader
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- version/adobe acrobat reader/6.0