CVE-2006-2712

Description

References

• secunia.com/advisories/20378
• securitytracker.com/id
• kb.cert.org/vuls/id/353769 · US Government Resource
• kb.cert.org/vuls/id/456729 · US Government Resource
• kb.cert.org/vuls/id/WDON-6Q6S8D
• kb.cert.org/vuls/id/WDON-6QAQFH
• vupen.com/english/advisories/2006/2069
• exchange.xforce.ibmcloud.com/vulnerabilities/26765
• exchange.xforce.ibmcloud.com/vulnerabilities/26781

Weitere Schwachstellen in class 5 enterprise vulnerability management

• CVE-2006-2711MITTEL 5.0Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key f…
• CVE-2006-2710MITTEL 5.0Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers w…
• CVE-2006-2709MITTEL 5.0Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) …
• CVE-2006-2708MITTEL 5.0Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size …
• CVE-2006-2707MITTEL 5.0Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could al…