The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a command with a missing ":" (colon) separator, which triggers a null dereference.
References
Configurations
History
21 Nov 2024, 00:11
Type | Values Removed | Values Added |
---|---|---|
References | () http://aluigi.altervista.org/adv/genecysbof-adv.txt - Exploit | |
References | () http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html - Exploit | |
References | () http://secunia.com/advisories/20099 - Vendor Advisory | |
References | () http://securityreason.com/securityalert/944 - | |
References | () http://www.osvdb.org/25482 - | |
References | () http://www.securityfocus.com/archive/1/433929/30/5010/threaded - | |
References | () http://www.securityfocus.com/bid/17969 - | |
References | () http://www.vupen.com/english/advisories/2006/1815 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/26523 - |
Information
Published : 2006-05-24 01:02
Updated : 2025-04-03 01:03
NVD link : CVE-2006-2555
Mitre link : CVE-2006-2555
CVE.ORG link : CVE-2006-2555
JSON object : View
Products Affected
genecys
- genecys
CWE