PT-2006-2211 · Enet · Enet Library

Luigi Auriemma · Publicado 2006-03-13 · Atualizado 2018-10-18 · CVE-2006-1195

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ENet library version Jul 2005 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by sending a packet fragment with a large total data size, which triggers an application abort when memory allocation fails.

Recommendations For ENet library version Jul 2005 and earlier, consider applying a patch or fix to the enet protocol handle send fragment function in protocol.c to prevent memory allocation failures due to large packet fragments. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-1195

Produtos afetados

Enet Library

Referências · 10

• 🔥 http://aluigi.altervista.org/adv/enetx-adv.txt · Exploit
• 🔥 http://secunia.com/advisories/19208 · Exploit
• http://securityfocus.com/bid/17087 · Nota
• http://vupen.com/english/advisories/2006/0940 · Nota
• http://osvdb.org/23845 · Nota
• http://securityfocus.com/archive/1/427465/100/0/threaded · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25158 · Nota
• http://securitytracker.com/id?1015767 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1195 · Nota de Segurança