CVE-2006-3425: Lumension Patchlink Update Server

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters.

Affected products

• Lumension Patchlink Update Server: version 6.1 only; version 6.2.0.181 only; version 6.2.0.189 only
• Novell Zenworks: up to and including 6.2

Published 2006-07-07. Last modified 2026-06-16.