CVE-2006-4490: Medium severity Cybozu Cybozu Office vulnerability
Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. (dot dot) sequence via the id parameter in (1) scripts/cbag/ag.exe or (2) scripts/s360v2/s360.exe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4490?
CVE-2006-4490 is classified as a medium severity vulnerability due to its directory traversal capabilities.
How do I fix CVE-2006-4490?
To fix CVE-2006-4490, update Cybozu Office to version 6.6 Build 1.3 or later and Share 360 to version 2.5 Build 0.3 or later.
Who is affected by CVE-2006-4490?
CVE-2006-4490 affects users of Cybozu Office versions prior to 6.6 Build 1.3 and Share 360 versions before 2.5 Build 0.3.
What types of systems are vulnerable to CVE-2006-4490?
CVE-2006-4490 affects systems running certain versions of Cybozu Office and Share 360 that allow directory traversal attacks.
What can attackers do with CVE-2006-4490?
Attackers exploiting CVE-2006-4490 can read arbitrary files on the server, which may lead to unauthorized information disclosure.