NVD

Id
64062  
Name
CVE-2006-5461  
Description
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-11-14  
Modified Date
2011-03-07  
Seq
2006-5461  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
334048 64062 CVE-2006-5461 http://avahi.org/milestone/Avahi%200.6.15  View
334049 64062 CVE-2006-5461 1017257  View
334050 64062 CVE-2006-5461 GLSA-200611-13  View
334051 64062 CVE-2006-5461 MDKSA-2006:215  View
334052 64062 CVE-2006-5461 SUSE-SR:2006:026  View
334053 64062 CVE-2006-5461 21016  View
334054 64062 CVE-2006-5461 USN-380-1  View
334055 64062 CVE-2006-5461 ADV-2006-4474  View
334056 64062 CVE-2006-5461 avahi-netlink-security-bypass(30207)  View
334057 64062 CVE-2006-5461 [avahi-tickets] 20061106 [Avahi] #69: Avahi needs to check the originating process of netlink messages  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59155 JVNDB-2006-001421 Avahi における Avahi へのネットワーク変更を傍受される脆弱性 Avahi は、netlink メッセージが他のプロセスではなくカーネルから送信されているか検証しないため、Avahi へのネットワーク変更を傍受される脆弱性が存在します。 CVE-2006-5461 21563 CVE-2006-5461 64062 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001421.html 2006-11-14 2012-06-26 View