PT-2006-3372 · Raydium · Raydium

Luigi Auriemma · Publicado 2006-05-16 · Atualizado 2018-10-18 · CVE-2006-2411

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Raydium versions prior to SVN revision 313

Description The issue is related to a buffer overflow in the raydium network read function, located in the network.c file. This occurs when the client receives packets with long global variables, allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to SVN revision 313, update to a version later than SVN revision 312 to resolve the issue. As a temporary workaround, consider restricting access to the raydium network read function in the network.c file until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-2411

Produtos afetados

Raydium

Referências · 9

• 🔥 https://exploit-db.com/exploits/1784 · Exploit
• http://vupen.com/english/advisories/2006/1808 · Nota
• http://securityfocus.com/bid/17986 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2411 · Nota de Segurança
• http://aluigi.altervista.org/adv/raydiumx-adv.txt · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26516 · Nota
• http://securityreason.com/securityalert/900 · Nota
• http://securityfocus.com/archive/1/433930/100/0/threaded · Nota
• http://secunia.com/advisories/20097 · Aviso do Fabricante