NVD

Id
59983  
Name
CVE-2006-1269  
Description
Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-03-18  
Modified Date
2011-03-07  
Seq
2006-1269  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308696 59983 CVE-2006-1269 GLSA-200603-12  View
308697 59983 CVE-2006-1269 17126  View
308698 59983 CVE-2006-1269 ADV-2006-0969  View
308699 59983 CVE-2006-1269 zoo-parse-bo(25264)  View
308700 59983 CVE-2006-1269 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183426  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61650 JVNDB-2006-003916 zoo におけるバッファオーバーフローの脆弱性 zoo には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-1269 17371 CVE-2006-1269 59983 6.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003916.html 2006-03-19 2014-03-11 View