NVD

Id
58799  
Name
CVE-2006-0056  
Description
Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer that was created by the pam_get_item function. NOTE: this issue only occurs in certain configurations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules before PAM-MySQL.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-02-13  
Modified Date
2011-03-07  
Seq
2006-0056  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301904 58799 CVE-2006-0056 http://jvn.jp/cert/JVNVU%23693909/index.html  View
301905 58799 CVE-2006-0056 1015603  View
301906 58799 CVE-2006-0056 http://sourceforge.net/forum/forum.php?forum_id=499394  View
301907 58799 CVE-2006-0056 GLSA-200606-18  View
301908 58799 CVE-2006-0056 VU#693909  View
301909 58799 CVE-2006-0056 16564  View
301910 58799 CVE-2006-0056 ADV-2006-0490  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62623 JVNDB-2005-000857 PAM-MySQL にサービス運用妨害 (DoS) 攻撃を受ける脆弱性 UNIX ベース の OS で MySQL データベースを使った認証機構を提供している PAM-MySQL モジュールには脆弱性が存在し、サービス運用妨害 (DoS) 攻撃を受ける可能性があります。 CVE-2006-0056 16158 CVE-2006-0056 58799 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000857.html 2005-09-28 2008-11-21 View