PT-2006-1080 · Avahi · Avahi

Publicado 2006-11-14 · Atualizado 2024-06-15 · CVE-2006-5461

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Avahi versions prior to 0.6.15

Description: The issue concerns a lack of verification of the sender identity of netlink messages, allowing local users to spoof network changes. This can lead to disruption of protected information integrity. The exploitation of this issue can be carried out locally.

Recommendations: For versions prior to 0.6.15, update to version 0.6.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the Avahi service to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-09539

CVE-2006-5461

OPENSUSE-SU-2024:10643-1

Produtos afetados

Avahi

Referências · 30

• http://novell.com/linux/security/advisories/2006_26_sr.html · Aviso do Fabricante
• http://secunia.com/advisories/22932 · Nota
• https://suse.com/security/cve/CVE-2021-26720 · Nota
• https://suse.com/security/cve/CVE-2021-3502 · Nota
• http://secunia.com/advisories/22807 · Aviso do Fabricante
• http://securitytracker.com/id?1017257 · Nota
• https://suse.com/security/cve/CVE-2006-5461 · Nota
• http://secunia.com/advisories/22852 · Aviso do Fabricante
• https://usn.ubuntu.com/380-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2008-5081 · Nota
• http://secunia.com/advisories/23020 · Nota
• https://osv.dev/vulnerability/CVE-2006-5461 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-1000845 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:215 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-3372 · Nota