CVE-2006-3425

HIGH 7.5CVE-2006-3425 · Published 07/07/2006 · updated 16/06/2026

In short

CVE-2006-3425 is a HIGH (CVSS 7.5) vulnerability affecting patchlink update server (lumension), zenworks (novell).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
patchlink update server lumension	`= 6.1= 6.2.0.181= 6.2.0.189`	No fix yet
zenworks novell	`≤ 6.2`	No fix yet

Description

FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters.

References

More vulnerabilities in patchlink update server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free