PT-2006-3372 · Raydium · Raydium

Luigi Auriemma · Published 2006-05-16 · Updated 2018-10-18 · CVE-2006-2411

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Raydium versions prior to SVN revision 313

Description The issue is related to a buffer overflow in the raydium network read function, located in the network.c file. This occurs when the client receives packets with long global variables, allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to SVN revision 313, update to a version later than SVN revision 312 to resolve the issue. As a temporary workaround, consider restricting access to the raydium network read function in the network.c file until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-2411

Affected Products

Raydium

References · 9

• 🔥 https://exploit-db.com/exploits/1784 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2411 · Security Note
• http://aluigi.altervista.org/adv/raydiumx-adv.txt · Vendor Advisory
• http://secunia.com/advisories/20097 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1808 · Note
• http://securityfocus.com/bid/17986 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26516 · Note
• http://securityreason.com/securityalert/900 · Note
• http://securityfocus.com/archive/1/433930/100/0/threaded · Note