PT-2006-6673 · Realnetworks · Real Networks Helix Mobile Server+1

Evgeny Legerov · Published 2006-11-21 · Updated 2018-10-17 · CVE-2006-6026

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Real Networks Helix Server versions prior to 11.1.3 Real Networks Helix Mobile Server versions prior to 11.1.3 Real Networks Helix DNA Server versions 11.0 and 11.1

Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword field.

Recommendations For Real Networks Helix Server versions prior to 11.1.3, update to version 11.1.3 or later. For Real Networks Helix Mobile Server versions prior to 11.1.3, update to version 11.1.3 or later. For Real Networks Helix DNA Server versions 11.0 and 11.1, update to a version later than 11.1.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-6026

Affected Products

Real Networks Helix Dna Server

Real Networks Helix Mobile Server

References · 13

• 🔥 https://exploit-db.com/exploits/3531 · Exploit
• http://secunia.com/advisories/22944 · Vendor Advisory
• http://vupen.com/english/advisories/2007/1056 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6026 · Security Note
• http://securityfocus.com/archive/1/463333/100/0/threaded · Note
• http://web.archive.org/web/20060502082622/www.gleg.net/vulndisco_pack_professional.shtml · Note
• http://securityfocus.com/bid/23068 · Note
• http://lists.helixcommunity.org/pipermail/server-cvs/2007-January/003783.html · Note
• http://securityfocus.com/bid/21141 · Note
• http://attrition.org/pipermail/vim/2007-March/001459.html · Note
• http://docs.real.com/docs/security/SecurityUpdate032107Server.pdf · Note
• http://gleg.net/helix.txt · Note
• http://attrition.org/pipermail/vim/2007-March/001468.html · Note