Lucene search

[email protected]CVE-2006-3251

HistoryJun 27, 2006 - 6:05 p.m.

CVE-2006-3251

2006-06-2718:05:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2006-3251

hashcash

buffer overflow

array_push

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%

JSON

Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.

Affected configurations

NVD

Node

hashcashhashcashRange≤1.20

hashcashhashcashMatch1.00

hashcashhashcashMatch1.01

hashcashhashcashMatch1.02

hashcashhashcashMatch1.03

hashcashhashcashMatch1.04

hashcashhashcashMatch1.05

hashcashhashcashMatch1.06

hashcashhashcashMatch1.07

hashcashhashcashMatch1.08

hashcashhashcashMatch1.09

hashcashhashcashMatch1.10

hashcashhashcashMatch1.11

hashcashhashcashMatch1.12

hashcashhashcashMatch1.13

hashcashhashcashMatch1.14

hashcashhashcashMatch1.15

hashcashhashcashMatch1.16

hashcashhashcashMatch1.17

hashcashhashcashMatch1.18

hashcashhashcashMatch1.19

CPENameOperatorVersion
hashcash:hashcashhashcashle1.20
hashcash:hashcashhashcasheq1.00
hashcash:hashcashhashcasheq1.01
hashcash:hashcashhashcasheq1.02
hashcash:hashcashhashcasheq1.03
hashcash:hashcashhashcasheq1.04
hashcash:hashcashhashcasheq1.05
hashcash:hashcashhashcasheq1.06
hashcash:hashcashhashcasheq1.07
hashcash:hashcashhashcasheq1.08

CPE	Name	Operator	Version
hashcash:hashcash	hashcash	le	1.20
hashcash:hashcash	hashcash	eq	1.00
hashcash:hashcash	hashcash	eq	1.01
hashcash:hashcash	hashcash	eq	1.02
hashcash:hashcash	hashcash	eq	1.03
hashcash:hashcash	hashcash	eq	1.04
hashcash:hashcash	hashcash	eq	1.05
hashcash:hashcash	hashcash	eq	1.06
hashcash:hashcash	hashcash	eq	1.07
hashcash:hashcash	hashcash	eq	1.08