CVE-2006-6967

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). In addition, it describes standard behavior (publication of revocation lists) and as such does not cross privilege boundaries. Notes: the former description is: "Check Point FireWall-1 allows remote attackers to obtain certificate revocation lists (CRLs) and other unspecified sensitive information via an HTTP request for the top-level URI on the internal certificate authority (ICA) port (18264/tcp).

Published

Feb 4, 2007

Last Modified

Nov 7, 2023

Status

Rejected

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6961WebRoot Spy Sweeper 4.5.9 and earlier does not detect malwar…
• CVE-2006-6962PHP remote file inclusion vulnerability in rsgallery2.html.p…
• CVE-2006-6963Multiple PHP remote file inclusion vulnerabilities in Docebo…
• CVE-2006-6964MailEnable Professional before 1.78 provides a cleartext use…
• CVE-2006-6965CRLF injection vulnerability in lib/exe/fetch.php in DokuWik…
• CVE-2006-6966phpGraphy before 0.9.13a does not properly unset variables w…
• CVE-2006-6968Cross-site scripting (XSS) vulnerability in the group modera…
• CVE-2006-6969Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, an…
• CVE-2006-6970Opera 9.10 Final allows remote attackers to bypass the Fraud…
• CVE-2006-6971Mozilla Firefox 2.0, possibly only when running on Windows, …
• CVE-2006-6972SQL injection in torrents.php in BtitTracker 1.3.2 and earli…
• CVE-2006-6973Headstart Solutions DeskPRO does not require authentication …