PT-2006-1065 · Tin · Tin

Published 2006-02-21 · Updated 2017-07-20 · CVE-2006-0804

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: TIN versions 1.8.0 and earlier TIN versions prior to 1.8.2

Description: The issue is related to an off-by-one error that might allow attackers to execute arbitrary code via unknown vectors, triggering a buffer overflow. This could lead to a disruption in confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations: For TIN versions 1.8.0 and earlier, update to version 1.8.2 or later to resolve the issue. For TIN versions prior to 1.8.2, update to version 1.8.2 or later to resolve the issue.

Fix

Related Identifiers

BDU:2015-09524

CVE-2006-0804

Affected Products

Tin

References · 12

• http://security.gentoo.org/glsa/glsa-200611-18.xml · Vendor Advisory
• http://openpkg.org/security/OpenPKG-SA-2006.005-tin.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-0804 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0804 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_05_sr.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0804 · Security Note
• https://bdu.fstec.ru/vul/2015-09524 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2006-0804 · Vendor Advisory
• http://securityfocus.com/bid/16728 · Note
• http://vupen.com/english/advisories/2006/0702 · Note
• http://secunia.com/advisories/19130 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24841 · Note