CVE-2006-1164 - Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat

Back Back to CVE browser

HIGH

Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat

Published Mar 12, 2006

7.5

HIGH

CVSS 2.0

EPSS 2.72%

Description

Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://hamid.ir/security/nodez.txt
x_refsource_MISCExploit
http://www.osvdb.org/23775
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17066
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1168
Advisory

Link	Providers	Tags
http://hamid.ir/security/nodez.txt		x_refsource_MISCExploit
http://www.osvdb.org/23775		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17066		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1168		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 12, 2006

Updated Aug 7, 2024

Reserved Mar 12, 2006

Link CVE-2006-1164

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1164

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 12, 2006

Updated Aug 7, 2024

Link EUVD-2006-1168

GitHub

No data