NVD

Id
64667  
Name
CVE-2006-6106  
Description
Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-19  
Modified Date
2016-10-17  
Seq
2006-6106  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337631 64667 CVE-2006-6106 http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.5  View
337632 64667 CVE-2006-6106 [linux-kernel] 20061215 [patch 24/24] Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)  View
337633 64667 CVE-2006-6106 [linux-kernel] 20061219 Linux 2.6.18.6  View
337634 64667 CVE-2006-6106 oval:org.mitre.oval:def:10891  View
337635 64667 CVE-2006-6106 RHSA-2007:0014  View
337636 64667 CVE-2006-6106 http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm  View
337637 64667 CVE-2006-6106 DSA-1304  View
337638 64667 CVE-2006-6106 DSA-1503  View
337639 64667 CVE-2006-6106 MDKSA-2007:002  View
337640 64667 CVE-2006-6106 MDKSA-2007:012  View
337641 64667 CVE-2006-6106 MDKSA-2007:025  View
337642 64667 CVE-2006-6106 SUSE-SA:2007:018  View
337643 64667 CVE-2006-6106 SUSE-SA:2007:021  View
337644 64667 CVE-2006-6106 SUSE-SA:2007:030  View
337645 64667 CVE-2006-6106 SUSE-SA:2007:035  View
337646 64667 CVE-2006-6106 SUSE-SA:2007:053  View
337647 64667 CVE-2006-6106 20070615 rPSA-2007-0124-1 kernel xen  View
337648 64667 CVE-2006-6106 20070209 rPSA-2007-0031-1 kernel  View
337649 64667 CVE-2006-6106 21604  View
337650 64667 CVE-2006-6106 2007-0002  View
337651 64667 CVE-2006-6106 USN-416-1  View
337652 64667 CVE-2006-6106 ADV-2006-5037  View
337653 64667 CVE-2006-6106 kernel-cmtprecvinteropmsg-bo(30912)  View
337654 64667 CVE-2006-6106 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218602  View
337655 64667 CVE-2006-6106 https://issues.rpath.com/browse/RPL-848  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51443 JVNDB-2007-000105 Linux Kernel の cmtp_recv_interopmsg () 関数における複数のバッファオーバーフローの脆弱性 Linux Kernel の Bluetooth ドライバの cmtp_recv_interopmsg () 関数に不備が存在し、manu (manufacturer) フィールドと serial (serial number) フィールドにおいて、過度に大きな CAPI メッセージをを含むデータを処理した際に複数の箇所でバッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-6106 22208 CVE-2006-6106 64667 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000105.html 2007-01-30 2007-04-01 View