Unscored severity · published Feb 23, 2006
CVE-2006-0868
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XR
Xml Rpc · Pear
1.0.2; 1.0.3; 1.0.4; 1.1.0; 1.2.0; 1.2.0rc1; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0868
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0868
Patch
http://pear.php.net/package/Auth/download/1.2.4
Patch
http://pear.php.net/package/Auth/download/1.3.0r4
secunia.com
http://secunia.com/advisories/19008
secunia.com
http://secunia.com/advisories/19301
securitytracker.com
http://securitytracker.com/id?1015666
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200603-13.xml