CVE-2006-0224: Buffer Overflow

Published Jan 25, 2006

Updated

Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument (alternative configuration file name).

Affected Software

4 affected components

LibAST LibAST=0.4

LibAST LibAST=0.5

LibAST LibAST=0.6

LibAST LibAST=0.6.1

Remediation

Patch Available

http://www.rosiello.org/en/read_bugs.php?id=25

Event History

Jan 25, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0224?

CVE-2006-0224 has a high severity due to its potential to allow local users to execute arbitrary code.

How do I fix CVE-2006-0224?

To fix CVE-2006-0224, upgrade to a version of LibAST later than 0.6.1 that addresses this vulnerability.

Which versions of LibAST are affected by CVE-2006-0224?

CVE-2006-0224 affects LibAST versions 0.4, 0.5, 0.6, and 0.6.1.

How can CVE-2006-0224 impact my system?

CVE-2006-0224 can potentially allow an attacker to gain unauthorized access and execute harmful code on the system.

What software uses LibAST that may be vulnerable due to CVE-2006-0224?

Eterm is one example of software that may be affected by the vulnerability found in LibAST due to CVE-2006-0224.