Vulnerability in Pear XML Rpc

CVE-2006-0868

Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."

EPSS: 0.024 (82.7th percentile) — read the EPSS interpretation.

Affected products

  • Pear Xml_rpc — versions 1.0.2, 1.0.3, 1.0.4
  • N/a — versions n/a

References