Unscored severity · published Nov 18, 2006
CVE-2006-5819
Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script
–
CVSS
6.7%
EPSS
No
On KEV
Description
Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.7% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UL
Ultraseek · Verity
through 5.6.2; 5.2.1; 5.5.0; 5.6.0; 5.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5819
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5819
securitytracker.com
http://securitytracker.com/id?1017235
US Government Resource
http://www.kb.cert.org/vuls/id/559616
Patch
http://www.osvdb.org/22892
Patch
http://www.osvdb.org/30286
www.securityfocus.com
http://www.securityfocus.com/archive/1/451847/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21120
More from Ultraseek
–
CVE-2006-5970
Verity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct requests with (1) a null ("%00") terminated url parameter to help/urlstatusgo.html;…
–
CVE-2006-5971
Absolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2 allows remote attackers to read arbitrary files via the name variable
–
CVE-2004-0050
Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2)…