Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-5461
HistoryNov 14, 2006 - 12:00 a.m.

CVE-2006-5461

2006-11-1400:00:00
ubuntu.com
ubuntu.com
9

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

10.1%

Avahi before 0.6.15 does not verify the sender identity of netlink messages
to ensure that they come from the kernel instead of another process, which
allows local users to spoof network changes to Avahi.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchavahi< 0.6.10-0ubuntu3.4UNKNOWN
ubuntu6.10noarchavahi< 0.6.13-2ubuntu2.4UNKNOWN

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

10.1%