CVE-2006-3633
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on...
CVE-2006-3633 is a medium vulnerability (CVSS 6.5) in Ossp Shiela, published July 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.37%, the 88th percentile. No source names a fixed version.
- Severity
- 6.5 MediumCVSS 2.0, NVD
- Exploit chance
- 3.37%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.
Exploit likelihood
Affected products
What each source reports
NVD Score used
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.
- Record
CVE-2006-3633- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.
- Record
CVE-2006-3633- Updated
- 2026-11-02
EUVDEUVD-2006-3628No score
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.
- Record
EUVD-2006-3628- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qhqx-326f-g83gNo score
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on...
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.
- Record
GHSA-qhqx-326f-g83g- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2006/2986
securityfocus.com/bid/19199
secunia.com/advisories/21209
exchange.xforce.ibmcloud.com/vulnerabilities/27978
openpkg.org/security/advisories/OpenPKG-SA-2006.014-shiela.html
sourcefire.com/services/advisories/sa072506.html
nvd.nist.gov/vuln/detail/CVE-2006-3633
github.com/advisories/GHSA-qhqx-326f-g83g