CVE-2006-0685

The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2006-02-15

Last modified

2024-08-07

Affected products

• Virtual Hosting Control System (Virtual Hosting Control System)

References

• http://secunia.com/advisories/18799
• http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt
• http://www.securityfocus.com/archive/1/424816/100/0/threaded
• http://www.securityfocus.com/bid/16600
• http://www.vupen.com/english/advisories/2006/0534
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24666