CVE-2006-1269

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive.

CVSS v2.0 6.2 MEDIUM

6.2^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 1.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/19250	Exploit Patch Vendor Advisory
http://secunia.com/advisories/19254
http://www.gentoo.org/security/en/glsa/glsa-200603-12.xml	Exploit Patch
http://www.securityfocus.com/bid/17126
http://www.vupen.com/english/advisories/2006/0969
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183426	Exploit Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25264

Configurations

Configuration 1 (hide)

cpe:2.3:a:rahul_dhesi:zoo:2.10:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-03-19 02:02

Updated : 2024-02-04 16:52

NVD link : CVE-2006-1269

Mitre link : CVE-2006-1269

CVE.ORG link : CVE-2006-1269

JSON object : View

Products Affected

rahul_dhesi

zoo

CWE

NVD-CWE-Other

{"id": "CVE-2006-1269", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": true, "exploitabilityScore": 1.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-03-19T02:02:00.000", "references": [{"url": "http://secunia.com/advisories/19250", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/19254", "source": "cve@mitre.org"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-12.xml", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/17126", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/0969", "source": "cve@mitre.org"}, {"url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183426", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25264", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive."}], "lastModified": "2017-07-20T01:30:27.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rahul_dhesi:zoo:2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC1857FC-C6A7-458F-A293-57BA9FC4ECA5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}