CVEvulnerability
CVE-2006-3217
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-06-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
Description
JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username and MAC and IP addresses, by setting the test field to certain values such as 2404 or 2790, then reading the information from the .JText field.
Affected configurations
• jaguarsoft jaguaredit (<= 1.1.0.20)
• jaguarsoft jaguaredit 1.1.0.18
• jaguarsoft jaguaredit 1.1.0.19
References
- http://secunia.com/advisories/20759 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/1145 securityreason.com
- http://www.securityfocus.com/archive/1/437937/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18576 Exploit
- http://www.srlabs.net/bulten/JaguarEdit_2.htm Exploit, Vendor Advisory
- http://www.srlabs.net/bulten/source/Jaguar.htm www.srlabs.net
- http://www.vupen.com/english/advisories/2006/2489 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27290 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20759 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/1145 securityreason.com
- http://www.securityfocus.com/archive/1/437937/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18576 Exploit
- http://www.srlabs.net/bulten/JaguarEdit_2.htm Exploit, Vendor Advisory
- http://www.srlabs.net/bulten/source/Jaguar.htm www.srlabs.net
- http://www.vupen.com/english/advisories/2006/2489 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27290 exchange.xforce.ibmcloud.com