{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-07-17T00:00:00", "descriptions": [{"lang": "en", "value": "The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "21066", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21066"}, {"name": "1016515", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016515"}, {"name": "20060717 boastMachine <= 3.1 SQL Injection Exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/440306/100/0/threaded"}, {"name": "1271", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1271"}, {"tags": ["x_refsource_MISC"], "url": "http://www.acid-root.new.fr/advisories/boastmachine.txt"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3831", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "21066", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21066"}, {"name": "1016515", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016515"}, {"name": "20060717 boastMachine <= 3.1 SQL Injection Exploit", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/440306/100/0/threaded"}, {"name": "1271", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1271"}, {"name": "http://www.acid-root.new.fr/advisories/boastmachine.txt", "refsource": "MISC", "url": "http://www.acid-root.new.fr/advisories/boastmachine.txt"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:48:38.986Z"}, "title": "CVE Program Container", "references": [{"name": "21066", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21066"}, {"name": "1016515", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016515"}, {"name": "20060717 boastMachine <= 3.1 SQL Injection Exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/440306/100/0/threaded"}, {"name": "1271", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1271"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.acid-root.new.fr/advisories/boastmachine.txt"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3831", "datePublished": "2006-07-25T00:00:00", "dateReserved": "2006-07-24T00:00:00", "dateUpdated": "2024-08-07T18:48:38.986Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kailash_nadh:boastmachine:*:*:*:*:*:*:*:*", "matchCriteriaId": "E07E0861-8D6F-4771-8260-E6490570B0C7", "versionEndIncluding": "3.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file."}, {"lang": "es", "value": "La selecci\u00f3n de backup en Kailash Nadh boastMachine (formalmente bMachine) 3.1 y anteriores utiliza nombres de archivo predecibles para backups de bases de datos y almancena nombres de archivo bajo la raiz web con insuficientes controles de acceso, lo caul permite a atacantes remotos obtener informaci\u00f3n sensible a trav\u00e9s de la descarga del fichero de backup."}], "id": "CVE-2006-3831", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-07-25T13:22:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21066"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1271"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016515"}, {"source": "cve@mitre.org", "url": "http://www.acid-root.new.fr/advisories/boastmachine.txt"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/440306/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21066"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/1271"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016515"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.acid-root.new.fr/advisories/boastmachine.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/440306/100/0/threaded"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}