PT-2006-3369 · Raydium · Raydium

Luigi Auriemma · Published 2006-05-16 · Updated 2018-10-18 · CVE-2006-2408

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Raydium before SVN revision 310

Description The issue is related to multiple buffer overflows that can be triggered by a large packet, potentially allowing remote attackers to execute arbitrary code. This can occur when logged via the raydium log function in log.c or the raydium console line add function in console.c, possibly from a long player name.

Recommendations For versions prior to SVN revision 310, update to revision 310 or later to resolve the issue. As a temporary workaround, consider restricting the length of player names to prevent exploitation of the buffer overflows in the raydium log and raydium console line add functions.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-2408

Affected Products

Raydium

References · 10

• 🔥 https://exploit-db.com/exploits/1784 · Exploit
• http://vupen.com/english/advisories/2006/1808 · Vendor Advisory
• http://aluigi.altervista.org/adv/raydiumx-adv.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2408 · Security Note
• http://secunia.com/advisories/20097 · Vendor Advisory
• http://securityfocus.com/bid/17986 · Note
• http://securityreason.com/securityalert/900 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26510 · Note
• http://securityfocus.com/archive/1/433930/100/0/threaded · Note
• http://raydium.org/svn.php · Note