CVE-2006-4127

2006-08-1423:00:00

mitre

www.cve.org

AI Score

7.7

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or © cmd.dc.c.

References

secunia.com/advisories/21384

securityreason.com/securityalert/1377

securitytracker.com/id?1016641

www.dc.ds.pg.gda.pl/

www.dc.ds.pg.gda.pl/?page=doc&doc=changelog

www.securityfocus.com/archive/1/442440/100/0/threaded

www.securityfocus.com/bid/19371

www.vupen.com/english/advisories/2006/3181

exchange.xforce.ibmcloud.com/vulnerabilities/28280