CVE-2006-4304

2006-08-2401:04:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.066

Percentile

93.8%

JSON

Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver.

Affected configurations

Nvd

Node

freebsdfreebsdMatch4.11

freebsdfreebsdMatch5.3

freebsdfreebsdMatch5.4

freebsdfreebsdMatch5.5

freebsdfreebsdMatch6.0

freebsdfreebsdMatch6.1

netbsdnetbsdMatch2.0

netbsdnetbsdMatch3.0

netbsdnetbsdMatch4.0

openbsdopenbsdMatch3.8

openbsdopenbsdMatch3.9

VendorProductVersionCPE
freebsdfreebsd4.11cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*
freebsdfreebsd5.3cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*
freebsdfreebsd5.4cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*
freebsdfreebsd5.5cpe:2.3:o:freebsd:freebsd:5.5:*:*:*:*:*:*:*
freebsdfreebsd6.0cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*
freebsdfreebsd6.1cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*
netbsdnetbsd2.0cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*
netbsdnetbsd3.0cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*
netbsdnetbsd4.0cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*
openbsdopenbsd3.8cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
freebsd	freebsd	4.11	cpe:2.3:o:freebsd:freebsd:4.11:::::::*
freebsd	freebsd	5.3	cpe:2.3:o:freebsd:freebsd:5.3:::::::*
freebsd	freebsd	5.4	cpe:2.3:o:freebsd:freebsd:5.4:::::::*
freebsd	freebsd	5.5	cpe:2.3:o:freebsd:freebsd:5.5:::::::*
freebsd	freebsd	6.0	cpe:2.3:o:freebsd:freebsd:6.0:::::::*
freebsd	freebsd	6.1	cpe:2.3:o:freebsd:freebsd:6.1:::::::*
netbsd	netbsd	2.0	cpe:2.3:o:netbsd:netbsd:2.0:::::::*
netbsd	netbsd	3.0	cpe:2.3:o:netbsd:netbsd:3.0:::::::*
netbsd	netbsd	4.0	cpe:2.3:o:netbsd:netbsd:4.0:::::::*
openbsd	openbsd	3.8	cpe:2.3:o:openbsd:openbsd:3.8:::::::*