CVE-2006-1788
First published: Thu Apr 13 2006(Updated: )
Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether the user ID is valid or invalid, which allows remote attackers to more easily identify valid user IDs via brute force attacks.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Document Server | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/secunia_research/2005-68/advisory/
- http://www.adobe.com/support/techdocs/331917.html
- http://secunia.com/advisories/15924
- http://www.securityfocus.com/bid/17500
- http://www.vupen.com/english/advisories/2006/1342
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25772
- http://www.securityfocus.com/archive/1/430869/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-1788?
CVE-2006-1788 has been classified with a high severity rating due to the potential for remote attackers to exploit valid user IDs.
How do I fix CVE-2006-1788?
To mitigate CVE-2006-1788, ensure that you update to the latest version of Adobe Document Server that addresses this vulnerability.
What impact does CVE-2006-1788 have on my system?
CVE-2006-1788 allows remote attackers to more easily identify valid user IDs, increasing the risk of unauthorized access.
Is CVE-2006-1788 present in versions other than 6.0?
CVE-2006-1788 specifically affects Adobe Document Server for Reader Extensions version 6.0.
Can CVE-2006-1788 be exploited without authentication?
Yes, CVE-2006-1788 can be exploited by unauthenticated users due to the differing error messages that help identify valid user IDs.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/weakness
- agent/description
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- vendor/adobe
- canonical/adobe document server
- version/adobe document server/6.0