Unscored severity · published Sep 23, 2006
CVE-2006-4959
Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
Secure Global Desktop · Sun
3.42; 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4959
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4959
secunia.com
http://secunia.com/advisories/22037
securityreason.com
http://securityreason.com/securityalert/1623
securitytracker.com
http://securitytracker.com/id?1016900
www.scip.ch
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555
www.securityfocus.com
http://www.securityfocus.com/archive/1/446566/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/20135
More from Secure Global Desktop
–
CVE-2006-5201
Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3)…
–
CVE-2006-4958
Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or…