USN-380-1: Avahi vulnerability

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service...

Avahi privilege escalation

Insufficient Netlink parameters validation allow to manipulate server parameters...

[Full-disclosure] [USN-380-1] Avahi vulnerability

=========================================================== Ubuntu Security Notice USN-380-1 November 11, 2006 avahi vulnerability CVE-2006-5461 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 LTS Ubuntu...

CVE-2006-2289

Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors...

CVE-2006-2289

Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors...

Buffer overflow

Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors...

CVE-2006-2288

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

CVE-2006-2289

Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors...

Code injection

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

CVE-2006-2288

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

DEBIAN-CVE-2006-2289

Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors...

DEBIAN-CVE-2006-2288

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

CVE-2006-2288

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

CVE-2006-2289

Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors...

CVE-2006-2288

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

CVE-2006-2288

Avahi in versions prior to 0.6.10 is affected by CVE-2006-2288, allowing local users to trigger a denial of service by causing mDNS/DNS-SD service disconnects due to unspecified mDNS name conflicts. The available documents identify the affected product and the general impact but do not provide ex...

CVE-2006-2289

CVE-2006-2289 is a buffer overflow vulnerability in Avahi’s avahi-core, affecting Avahi before 0.6.10. The issue allows local users to execute arbitrary code via unknown vectors due to a buffer overflow in avahi-core. Documented sources (SUSE, Ubuntu, Debian and others) describe the vulnerability...

CVE-2006-2288

Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...

CVE-2006-2289

Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors...

[SA20022] Avahi Denial of Service and Buffer Overflow Vulnerabilities

TITLE: Avahi Denial of Service and Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA20022 VERIFY ADVISORY: http://secunia.com/advisories/20022/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Avahi 0.x http://secunia.com/product/9784/ DESCRIPTION...