CVE:CVE-2006-3425
CNNVD:CNNVD-200607-027
FastPatch for (a) PatchLink Update Server (PLUS) 6.1 P1之前版本及 6.2 SR1 P1之前的6.2.x版本, 以及(b) Novell ZENworks 6.2 SR1及之前版本的FastPatch对dagent/proxyreg.asp不要求认证。远程攻击者可以借助修改的 (1) List, (2) Proxy, 或 (3) Delete 参数，列出、添加或删除PatchLink Distribution Point (PDP) 代理服务器。
solution:Upgrade lumension patchlink_update_server to a higher version than 6.1,6.2.0.181,6.2.0.189,and avoid the version 6.1,6.2.0.181,6.2.0.189; Upgrade novell zenworks to a higher version than *:sr1,and avoid the version *:sr1