CVE-2006-3425

CVE-2006-3425 describes an authentication bypass vulnerability in FastPatch for PatchLink Update Server (PLUS) versions before 6.1 P1 and 6.2.x before 6.2 SR1 P1, as well as Novell ZENworks 6.2 SR1 and earlier. This flaw allows unauthenticated remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers by manipulating specific parameters in dagent/proxyreg.asp. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this CVE.