PT-2006-2991 · Winny · Winny

Publicado 2006-04-25 · Atualizado 2017-07-20 · CVE-2006-2007

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Winny versions 2.0 b7.1 and earlier

Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port.

Recommendations For versions 2.0 b7.1 and earlier, update to a version later than 2.0 b7.1 to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-2007

Produtos afetados

Winny

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-2007 · Nota de Segurança
• http://securityfocus.com/bid/17666 · Nota
• http://osvdb.org/24883 · Nota
• http://jvn.jp/jp/JVN%2374294680/index.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25986 · Nota
• http://vupen.com/english/advisories/2006/1486 · Nota
• http://kb.cert.org/vuls/id/167033 · Nota
• http://eeye.com/html/research/advisories/AD20060421.html · Aviso do Fabricante
• http://secunia.com/advisories/19795 · Aviso do Fabricante