[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

110204

 
 

909

 
 

85984

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2006-4262Date: (C)2006-08-23   (M)2018-06-20


Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 5.1
Exploit Score: Exploit Score: 4.9
Impact Score: Impact Score: 6.4
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: HIGH
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: PARTIAL
Scope: Integrity: PARTIAL
Confidentiality: Availability: PARTIAL
Integrity:  
Availability:  
  
Reference:
BID-19686
BID-19687
SECUNIA-21601
SECUNIA-22239
SECUNIA-22515
OSVDB-28135
OSVDB-28136
ADV-2006-3374
DSA-1186
GLSA-200610-08
RHSA-2009:1101
cscope-cscopelists-bo(28545)
cscope-reffile-bo(28546)
http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500
http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645

CWE    1
CWE-119
OVAL    3
oval:org.secpod.oval:def:200437
oval:org.secpod.oval:def:200555
oval:org.secpod.oval:def:500702

© SecPod Technologies