Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2006-1269

Date: March 18, 2006

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive.

Severity Score

Related Resources (10)

https://people.canonical.com/~ubuntu-security/cve/CVE-2006-1269
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183426
http://www.gentoo.org/security/en/glsa/glsa-200603-12.xml
http://secunia.com/advisories/19254
http://www.vupen.com/english/advisories/2006/0969
https://nvd.nist.gov/vuln/detail/CVE-2006-1269
https://exchange.xforce.ibmcloud.com/vulnerabilities/25264
http://secunia.com/advisories/19250
http://www.securityfocus.com/bid/17126
https://www.mend.io/vulnerability-database/CVE-2006-1269

Severity Score

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): HIGH
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us