CVE-2006-4959
First published: Sat Sep 23 2006(Updated: )
Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tarantella Secure Global Desktop | =4.0 | |
| Tarantella Secure Global Desktop | =3.42 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555
- http://www.securityfocus.com/bid/20135
- http://securitytracker.com/id?1016900
- http://secunia.com/advisories/22037
- http://securityreason.com/securityalert/1623
- http://www.vupen.com/english/advisories/2006/3739
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29076
- http://www.securityfocus.com/archive/1/446566/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-4959?
CVE-2006-4959 is classified as a vulnerability with a low to medium severity level, primarily due to its potential exposure of sensitive information.
How do I fix CVE-2006-4959?
To mitigate CVE-2006-4959, you should upgrade to Sun Secure Global Desktop version 4.3 or later.
What systems are affected by CVE-2006-4959?
CVE-2006-4959 affects Sun Secure Global Desktop versions 3.42 and 4.0.
What type of information can be exposed due to CVE-2006-4959?
CVE-2006-4959 may allow attackers to access sensitive information such as hostnames, versions, and settings details.
When was CVE-2006-4959 reported?
CVE-2006-4959 was reported in September 2006.
- agent/references
- agent/last-modified-date
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sun
- canonical/tarantella secure global desktop
- version/tarantella secure global desktop/4.0
- version/tarantella secure global desktop/3.42