CVE-2006-6378: High severity widcomm btsavemysql vulnerability
Published Dec 7, 2006
·Updated
BTSaveMySql 1.2 stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain configuration and save files via direct requests.
Affected Software
1 affected component
Widcomm Btsavemysql=1.2
Event History
Dec 7, 2006
CVE Published
05:28 PM
Data Sourced
via NVD·05:28 PM
DescriptionSeverityAffected Software
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6378?
CVE-2006-6378 has a medium severity due to the potential exposure of sensitive data.
2
How do I fix CVE-2006-6378?
To fix CVE-2006-6378, ensure that access controls are properly configured to restrict access to sensitive files.
3
What type of data is exposed in CVE-2006-6378?
CVE-2006-6378 exposes sensitive configuration and save files because they are stored under the web root.
4
Who is affected by CVE-2006-6378?
Users of BTSaveMySql version 1.2 are affected by CVE-2006-6378.
5
Can CVE-2006-6378 be exploited remotely?
Yes, CVE-2006-6378 can be exploited remotely through direct HTTP requests to the exposed files.