PT-2006-3369 · Raydium · Raydium

Luigi Auriemma · Publicado 2006-05-16 · Atualizado 2018-10-18 · CVE-2006-2408

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Raydium before SVN revision 310

Description The issue is related to multiple buffer overflows that can be triggered by a large packet, potentially allowing remote attackers to execute arbitrary code. This can occur when logged via the raydium log function in log.c or the raydium console line add function in console.c, possibly from a long player name.

Recommendations For versions prior to SVN revision 310, update to revision 310 or later to resolve the issue. As a temporary workaround, consider restricting the length of player names to prevent exploitation of the buffer overflows in the raydium log and raydium console line add functions.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-2408

Produtos afetados

Raydium

Referências · 10

• 🔥 https://exploit-db.com/exploits/1784 · Exploit
• http://vupen.com/english/advisories/2006/1808 · Aviso do Fabricante
• http://securityfocus.com/bid/17986 · Nota
• http://aluigi.altervista.org/adv/raydiumx-adv.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-2408 · Nota de Segurança
• http://securityreason.com/securityalert/900 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26510 · Nota
• http://securityfocus.com/archive/1/433930/100/0/threaded · Nota
• http://secunia.com/advisories/20097 · Aviso do Fabricante
• http://raydium.org/svn.php · Nota