CVE-2006-0855
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.7%
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| rahul_dhesi:zoo | rahul dhesi zoo | le | 2.10 |
References
archives.neohapsis.com/archives/bugtraq/2006-04/0061.html
secunia.com/advisories/19002
secunia.com/advisories/19130
secunia.com/advisories/19148
secunia.com/advisories/19166
secunia.com/advisories/19408
secunia.com/advisories/19514
securityreason.com/securityalert/546
securitytracker.com/id?1015668
securitytracker.com/id?1015866
www.debian.org/security/2006/dsa-991
www.gentoo.org/security/en/glsa/glsa-200603-05.xml
www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt
www.guay-leroux.com/projects/zoo-advisory.txt
www.novell.com/linux/security/advisories/2006_05_sr.html
www.novell.com/linux/security/advisories/2006_06_sr.html
www.securityfocus.com/archive/1/425887/100/0/threaded
www.securityfocus.com/bid/16790
www.vupen.com/english/advisories/2006/0705
www.vupen.com/english/advisories/2006/1220
exchange.xforce.ibmcloud.com/vulnerabilities/24904
Related
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.7%