CVE-2006-4899

CA eTrust Security Command Center <SP1 CR2 - Info Disclosure

Title source: llm
STIX 2.1

Description

The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Patrick Webster · textremotewindows
https://www.exploit-db.com/exploits/28640

References (11)

Core 11
Core References
Exploit, Patch, Vendor Advisory x_refsource_misc
http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29102
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/29009
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016910
Exploit, Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22023
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20139
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/446716/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/446611/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3738

Scores

EPSS 0.1635
EPSS Percentile 94.9%

Details

Status published
Products (2)
broadcom/etrust_security_command_center 1.0
broadcom/etrust_security_command_center 8 (3 CPE variants)
Published Sep 22, 2006
Tracked Since Feb 18, 2026