CVE-2006-3430

HIGH 7.5CVE-2006-3430 · Published 07/07/2006 · updated 16/06/2026

In short

CVE-2006-3430 is a HIGH (CVSS 7.5) vulnerability affecting patchlink update server (lumension), zenworks (novell).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
patchlink update server lumension	`= 6.1= 6.2.0.181= 6.2.0.189`	No fix yet
zenworks novell	`≤ 6.2`	No fix yet

Description

SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.

References

lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html
secunia.com/advisories/20876 · Vendor Advisory
secunia.com/advisories/20878 · Vendor Advisory
securityreason.com/securityalert/1200
securitytracker.com/id
securityfocus.com/archive/1/438710/100/0/threaded
securityfocus.com/bid/18715
vupen.com/english/advisories/2006/2595 · Vendor Advisory
vupen.com/english/advisories/2006/2596 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/27545

More vulnerabilities in patchlink update server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free