Unscored severity · published Aug 22, 2006
CVE-2006-4290
Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to gain sensitive information via unspecified vectors
–
CVSS
1.8%
EPSS
No
On KEV
Description
Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to gain sensitive information via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
Vaio Media Server · Sony
2.0; 3.0; 4.0; 5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4290
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4290
Patch
http://kb.sony-europe.com/kb/solutions/en/V00000_V00499/v00246.html
Patch
http://secunia.com/advisories/21512
Patch
http://www.pentest.co.uk/documents/ptl-2006-02.html
Patch
http://www.securityfocus.com/bid/19560
www.vupen.com
http://www.vupen.com/english/advisories/2006/3287
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/28424
More from Vaio Media Server
–
CVE-2006-4289
Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspecified vectors