PT-2006-4777 · Unknown · Midirecord

Dedi Dwianto · Published 2006-07-31 · Updated 2018-10-17 · CVE-2006-3931

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Midirecord version 2.0

Description A buffer overflow issue exists in the daemon function in midirecord.cc, allowing local users to potentially execute arbitrary code via a long command line argument, specifically the filename. This issue may not be considered a vulnerability if Midirecord is not installed setuid.

Recommendations For Midirecord version 2.0, consider restricting access to the daemon function in midirecord.cc to minimize the risk of exploitation until a patch is available. Avoid using long command line arguments, specifically filenames, in the affected function.

Exploit

Fix

Related Identifiers

CVE-2006-3931

Affected Products

Midirecord

References · 7

• 🔥 http://advisories.echo.or.id/adv/adv41-theday-2006.txt · Exploit
• 🔥 https://exploit-db.com/exploits/28288 · Exploit
• 🔥 http://securityfocus.com/bid/19190 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3931 · Security Note
• http://securityfocus.com/archive/1/441204/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28047 · Note
• http://securityreason.com/securityalert/1303 · Note