Lucene search

K
cve[email protected]CVE-2006-6299
HistoryDec 05, 2006 - 11:28 a.m.

CVE-2006-6299

2006-12-0511:28:00
NVD-CWE-Other
web.nvd.nist.gov
16
cve-2006-6299
integer overflow
msg.dll
novell zenworks 7 asset management
zam
sp1 ir11
collection client
remote code execution
buffer overflow
nvd

8.2 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.128 Low

EPSS

Percentile

95.4%

Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow.

8.2 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.128 Low

EPSS

Percentile

95.4%

Related for CVE-2006-6299