CVE-2006-0704

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-15 · updated 2026-06-16

Description

iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, web server name, IP, and port, session cookie information, and the IIS system username.

Affected products

Ie Integrator: 4.4.220114

References

http://secunia.com/advisories/18813
http://www.irmplc.com/advisory016.htm
http://www.vupen.com/english/advisories/2006/0568
https://exchange.xforce.ibmcloud.com/vulnerabilities/24714
http://secunia.com/advisories/18813
http://www.irmplc.com/advisory016.htm
http://www.vupen.com/english/advisories/2006/0568
https://exchange.xforce.ibmcloud.com/vulnerabilities/24714

Get alerted when CVE-2006-0704 or the next vulnerability affects your stack