PT-2006-2177 · Unknown · Tenes Empanadas Graciela

Luigi Auriemma · Published 2006-03-10 · Updated 2017-07-20 · CVE-2006-1150

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Tenes Empanadas Graciela (TEG) version 0.11.1

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by creating multiple users with long, identical nicknames, which triggers an off-by-one error due to the automatic appending of an underscore to the end of duplicate nicknames.

Recommendations For Tenes Empanadas Graciela (TEG) version 0.11.1, consider restricting the creation of users with identical nicknames to prevent the denial of service. As a temporary workaround, limit the length of nicknames to avoid triggering the off-by-one error. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2006-1150

Affected Products

Tenes Empanadas Graciela

References · 9

• 🔥 http://secunia.com/advisories/19134 · Exploit
• 🔥 http://securityfocus.com/bid/16982 · Exploit
• 🔥 http://aluigi.altervista.org/adv/tegob1-adv.txt · Exploit
• https://osv.dev/vulnerability/CVE-2006-1150 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-1150 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1150 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25165 · Note
• http://vupen.com/english/advisories/2006/0846 · Note