CVE-2006-3425 - FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters

Back Back to CVE browser

HIGH

FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters

Published Jul 7, 2006

7.5

HIGH

CVSS 2.0

EPSS 2.33%

Description

FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html
mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/20876
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/advisories/20878
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securityreason.com/securityalert/1200
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016405
vdb-entryx_refsource_SECTRACKPatch
http://www.securityfocus.com/archive/1/438710/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/18723
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2595
vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/2596
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3421
Advisory

Link	Providers	Tags
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html		mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/20876		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/advisories/20878		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securityreason.com/securityalert/1200		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016405		vdb-entryx_refsource_SECTRACKPatch
http://www.securityfocus.com/archive/1/438710/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/18723		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2595		vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/2596		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3421		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 7, 2006

Updated Aug 7, 2024

Reserved Jul 6, 2006

Link CVE-2006-3425

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-3425

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 7, 2006

Updated Aug 7, 2024

Link EUVD-2006-3421

GitHub

No data