CVE-2006-0864

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-23 · updated 2026-06-16

Description

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value.

Affected products

Hauri Virobot: 2.0_2005-08-17

References

http://secunia.com/advisories/18974
http://securitytracker.com/id?1015658
http://www.securityfocus.com/archive/1/425788/100/0/threaded
http://www.securityfocus.com/bid/16768
http://www.vupen.com/english/advisories/2006/0691
http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/24850
http://secunia.com/advisories/18974
http://securitytracker.com/id?1015658
http://www.securityfocus.com/archive/1/425788/100/0/threaded
http://www.securityfocus.com/bid/16768
http://www.vupen.com/english/advisories/2006/0691

Get alerted when CVE-2006-0864 or the next vulnerability affects your stack