Unscored severity · published Jul 11, 2006
CVE-2006-1300
Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via…
–
CVSS
36.9%
EPSS
No
On KEV
Description
Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."
Exploitation
Is it being used?
Exploit prediction (EPSS)36.9% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
.net Framework · Microsoft
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1300
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1300
secunia.com
http://secunia.com/advisories/20999
Patch
http://securitytracker.com/id?1016465
www.osvdb.org
http://www.osvdb.org/27153
Patch
http://www.securityfocus.com/bid/18920
www.vupen.com
http://www.vupen.com/english/advisories/2006/2751
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-033
More from .net Framework
9.8
CVE-2020-0646
Microsoft .NET Framework Remote Code Execution Vulnerability
7.8
CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
7.8
CVE-2017-8759
Microsoft .NET Framework Remote Code Execution Vulnerability
7.8
CVE-2015-1671
Microsoft Windows Remote Code Execution Vulnerability
7.5
CVE-2024-29059
.NET Framework Information Disclosure Vulnerability