medium4.0Public exploit code
CVE-2006-0174
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure2006-01-10 · webapps · cgi · Verified
Impact
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hummingbird | Collaboration | through 5.21 Version 5.2 |
| Hummingbird | Enterprise Collaboration | through 5.21 Version 5.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18411
- http://securityreason.com/securityalert/328
- http://www.securenetwork.it/advisories/sn-2006-01.html
- http://www.securityfocus.com/archive/1/421392/100/0/threaded
- http://www.securityfocus.com/bid/16195
- http://www.vupen.com/english/advisories/2006/0145
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24069
- http://secunia.com/advisories/18411
- http://securityreason.com/securityalert/328
- http://www.securenetwork.it/advisories/sn-2006-01.html
- http://www.securityfocus.com/archive/1/421392/100/0/threaded
- http://www.securityfocus.com/bid/16195
- http://www.vupen.com/english/advisories/2006/0145
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24069