VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 12, 2006· Updated Apr 16, 2026

CVE-2006-2658

CVE-2006-2658

Description

Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an HTTP request.

Affected products

12
  • Mono/Xsp
    cpe:2.3:a:mono:xsp:*:*:*:*:*:*:*:*
  • SUSE S.A./Open Enterprise Server
    cpe:2.3:a:suse:suse_open_enterprise_server:1:*:*:*:*:*:*:*
  • SUSE S.A./Linux10 versions
    cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*+ 9 more
    • cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:10.1:*:personal:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:10.1:*:professional:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.