CVE-2006-0911: ipswitch whatsup Resource Management Errors
Vulnerability summary
CVE-2006-0911 is a medium (CVSS 5.0) Resource Management Errors vulnerability in ipswitch whatsup. EPSS estimates a 16.27% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 28-02-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, possibly involving the (1) "In]" and (2) "b;tnLogIn" parameters, or (3) malformed btnLogIn parameters, possibly involving missing "[" (open bracket) or "[" (closing bracket) characters, as demonstrated by "&btnLogIn=[Log&In]=&" or "&b;tnLogIn=[Log&In]=&" in the URL. NOTE: due to the lack of diagnosis by the original researcher, the precise nature of the vulnerability is unclear.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
16.27%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 16.27% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (zur.homelinux.com)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Ipswitch1 product
- whatsupprofessional_2006
1 vendor · 1 product