CVE-2006-4221 - Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 a

CVE-2006-4221

Summary

Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.

References

Vulnerable Configurations

cpe:2.3:a:ibm:egatherer:2.0.16:*:*:*:*:*:*:*
cpe:2.3:a:ibm:egatherer:2.0.16:*:*:*:*:*:*:*
cpe:2.3:a:ibm:egatherer:2.42.243:*:*:*:*:*:*:*
cpe:2.3:a:ibm:egatherer:2.42.243:*:*:*:*:*:*:*

CVSS

Base:	9.3 (as of 17-10-2018 - 21:34)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

refmap via4

bid	19554
bugtraq	20060816 [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability 20060829 [ISR] - IBM eGatherer ActiveX Code Execution PoC
cert-vn	VU#380277
misc	http://www.eeye.com/html/research/advisories/AD20060816.html
sectrack	1016705
secunia	21528
sreason	1424
vupen	ADV-2006-3305
xf	egatherer-activex-runegatherer-bo(28418)

saint via4

bid	19554
description	IBM eGatherer ActiveX RunEgatherer buffer overflow
id	web_client_ibmas
osvdb	27976
title	egatherer_runegatherer
type	client

Last major update

17-10-2018 - 21:34

Published

18-08-2006 - 20:04

Last modified

17-10-2018 - 21:34