Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-2247 | First vendor Publication | 2006-05-09 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2247 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 3 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-10-24 | Name : WebCalendar User Account Enumeration Disclosure Issue File : nvt/webcalendar_info_disclosure.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 1056-1 (webcalendar) File : nvt/deb_1056_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 25280 | WebCalendar Login Error Message User Account Enumeration WebCalendar contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when invalid credentials are provided to the application. The application responds with different messages to valid and invalid user name/password combinations, allowing an attacker to enumerate valid user names and resulting in a loss of confidentiality. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1056.nasl - Type : ACT_GATHER_INFO |
| 2006-05-16 | Name : The remote web server is affected by an information disclosure issue. File : webcalendar_info_disclosure.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:20:32 |
|
| 2024-11-28 12:08:54 |
|
| 2021-05-04 12:04:01 |
|
| 2021-04-22 01:04:33 |
|
| 2020-05-23 00:17:46 |
|
| 2018-10-18 21:20:07 |
|
| 2017-07-20 09:23:34 |
|
| 2016-06-28 15:46:17 |
|
| 2016-04-26 14:35:59 |
|
| 2014-02-17 10:35:45 |
|
| 2013-05-11 10:56:34 |
|
