Lucene search

MitreCVE-2006-1592

HistoryApr 03, 2006 - 10:04 a.m.

CVE-2006-1592

2006-04-0310:04:00

mitre

web.nvd.nist.gov

buffer overflow

w_wad.cpp

remote code execution

cve-2006-1592

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.12

Percentile

95.4%

JSON

Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument.

Affected configurations

Nvd

Node

x-doomx-doomMatch1.06.07

zdaemonzdaemonMatch1.08.01

VendorProductVersionCPE
x-doomx-doom1.06.07cpe:2.3:a:x-doom:x-doom:1.06.07:*:*:*:*:*:*:*
zdaemonzdaemon1.08.01cpe:2.3:a:zdaemon:zdaemon:1.08.01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
x-doom	x-doom	1.06.07	cpe:2.3:a:x-doom:x-doom:1.06.07:::::::*
zdaemon	zdaemon	1.08.01	cpe:2.3:a:zdaemon:zdaemon:1.08.01:::::::*

References

aluigi.altervista.org/adv/zdaebof-adv.txt

lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html

secunia.com/advisories/19496

secunia.com/advisories/19509

www.securityfocus.com/archive/1/429521/100/0/threaded

www.securityfocus.com/bid/17340

www.vupen.com/english/advisories/2006/1198

www.vupen.com/english/advisories/2006/1199

exchange.xforce.ibmcloud.com/vulnerabilities/25592

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.12

Percentile

95.4%

JSON

Related for CVE-2006-1592