CVE-2006-2896
published 2006-06-07CVE-2006-2896: profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
PriorityP335medium5CVSS 2.0
AVNACLAuNCNIPAN
EXPLOIT
EPSS
9.19%
94.7th percentile
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| funkboard | funkboard | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wg2p-cfwm-2hhj: profile
ghsa_unreviewed·2022-05-01
CVE-2006-2896 [MEDIUM] GHSA-wg2p-cfwm-2hhj: profile
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
Red Hat
BSD compress LZW decoder buffer overflow
vendor_redhat·2011-08-10·CVSS 7.5
CVE-2011-2895 [HIGH] BSD compress LZW decoder buffer overflow
BSD compress LZW decoder buffer overflow
The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.
Package: busybox (Red Hat Enterprise Linux 4) - Not affected
Package: gzip (Red Hat Enterprise Linux 4) - Not affected
Package: mai
Red Hat
David Koblas' GIF decoder LZW decoder buffer overflow
vendor_redhat·2011-08-10·CVSS 7.5
CVE-2011-2896 [HIGH] David Koblas' GIF decoder LZW decoder buffer overflow
David Koblas' GIF decoder LZW decoder buffer overflow
The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.
Statement: Vulnerable. This issue affects the versio
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/20433http://securityreason.com/securityalert/1066http://www.funkboard.co.uk/forum/thread.php?id=302http://www.securityfocus.com/archive/1/435987/100/0/threadedhttp://www.vupen.com/english/advisories/2006/2158https://exchange.xforce.ibmcloud.com/vulnerabilities/26912https://www.exploit-db.com/exploits/1875http://secunia.com/advisories/20433http://securityreason.com/securityalert/1066http://www.funkboard.co.uk/forum/thread.php?id=302http://www.securityfocus.com/archive/1/435987/100/0/threadedhttp://www.vupen.com/english/advisories/2006/2158https://exchange.xforce.ibmcloud.com/vulnerabilities/26912https://www.exploit-db.com/exploits/1875
2006-06-07
Published