PT-2006-2211 · Enet · Enet Library

Luigi Auriemma · Published 2006-03-13 · Updated 2018-10-18 · CVE-2006-1195

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ENet library version Jul 2005 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by sending a packet fragment with a large total data size, which triggers an application abort when memory allocation fails.

Recommendations For ENet library version Jul 2005 and earlier, consider applying a patch or fix to the enet protocol handle send fragment function in protocol.c to prevent memory allocation failures due to large packet fragments. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-1195

Affected Products

Enet Library

References · 10

• 🔥 http://aluigi.altervista.org/adv/enetx-adv.txt · Exploit
• 🔥 http://secunia.com/advisories/19208 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1195 · Security Note
• http://securityfocus.com/bid/17087 · Note
• http://vupen.com/english/advisories/2006/0940 · Note
• http://osvdb.org/23845 · Note
• http://securityfocus.com/archive/1/427465/100/0/threaded · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25158 · Note
• http://securitytracker.com/id?1015767 · Note