CVE-2006-5668: High severity Ampache Ampache vulnerability
Published Nov 3, 2006
·Updated
Unspecified vulnerability in Ampache 3.3.2 and earlier, when registerglobals is enabled, allows remote attackers to bypass security restrictions and gain guest access.
Affected Software
9 affected components
Ampache Ampache=3.2
Ampache Ampache=3.2.1
Ampache Ampache=3.2.2
Ampache Ampache=3.2.3
Ampache Ampache=3.2.4
Ampache Ampache=3.3
Ampache Ampache=3.3.1
Ampache Ampache=3.3.1.2
Ampache Ampache=3.3.2
Remediation
Patch Available
Event History
Nov 3, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·01:07 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5668?
CVE-2006-5668 is classified as a medium severity vulnerability allowing unauthorized guest access.
2
How do I fix CVE-2006-5668?
To fix CVE-2006-5668, disable register_globals in your PHP configuration and upgrade to a version of Ampache that is not affected.
3
Which versions of Ampache are affected by CVE-2006-5668?
CVE-2006-5668 affects Ampache versions 3.3.2 and earlier.
4
What type of attacks can exploit CVE-2006-5668?
CVE-2006-5668 can be exploited by remote attackers to bypass security restrictions.
5
Is there a patch available for CVE-2006-5668?
There is no direct patch; the solution involves upgrading to a newer version of Ampache and configuring PHP settings.