CVE-2006-2432

IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.

• http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.htmlPatch
• http://secunia.com/advisories/20032Patch, Vendor Advisory
• http://securityreason.com/securityalert/910
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879Patch
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881Patch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK19195&apar=onlyPatch
• http://www.osvdb.org/25375
• http://www.vupen.com/english/advisories/2006/1736
• http://www.vupen.com/english/advisories/2006/2552
• http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.htmlPatch
• http://secunia.com/advisories/20032Patch, Vendor Advisory
• http://securityreason.com/securityalert/910
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879Patch
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881Patch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK19195&apar=onlyPatch
• http://www.osvdb.org/25375
• http://www.vupen.com/english/advisories/2006/1736
• http://www.vupen.com/english/advisories/2006/2552

Published

May 17, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2426Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK …
• CVE-2006-2427freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXa…
• CVE-2006-2428add.asp in DUware DUbanner 3.1 allows remote attackers to ex…
• CVE-2006-2429Unspecified vulnerability in IBM WebSphere Application Serve…
• CVE-2006-2430IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 an…
• CVE-2006-2431Cross-site scripting (XSS) vulnerability in the 500 Internal…
• CVE-2006-2433Unspecified vulnerability in IBM WebSphere Application Serve…
• CVE-2006-2434Unspecified vulnerability in WebSphere 5.1.1 (or any earlier…
• CVE-2006-2435Unspecified vulnerability in IBM WebSphere Application Serve…
• CVE-2006-2436WebSphere Application Server 5.0.2 (or any earlier cumulativ…
• CVE-2006-2437The viewfile servlet in the documentation package (resin-doc…
• CVE-2006-2438Directory traversal vulnerability in the viewfile servlet in…