PT-2006-1080 · Avahi · Avahi

Published 2006-11-14 · Updated 2024-06-15 · CVE-2006-5461

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Avahi versions prior to 0.6.15

Description: The issue concerns a lack of verification of the sender identity of netlink messages, allowing local users to spoof network changes. This can lead to disruption of protected information integrity. The exploitation of this issue can be carried out locally.

Recommendations: For versions prior to 0.6.15, update to version 0.6.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the Avahi service to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-09539

CVE-2006-5461

OPENSUSE-SU-2024:10643-1

Affected Products

Avahi

References · 30

• http://novell.com/linux/security/advisories/2006_26_sr.html · Vendor Advisory
• http://secunia.com/advisories/22807 · Vendor Advisory
• http://secunia.com/advisories/22852 · Vendor Advisory
• https://usn.ubuntu.com/380-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-5461 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:215 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200611-13.xml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-5461 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-5461 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09539 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-5461 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10643-1 · Vendor Advisory
• http://secunia.com/advisories/22932 · Note
• https://suse.com/security/cve/CVE-2021-26720 · Note
• https://suse.com/security/cve/CVE-2021-3502 · Note