CVE-2006-0477: Buffer Overflow
Published Jan 31, 2006
·Updated
Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link.
Affected Software
13 affected components
Git git=1.0.0
Git git=1.0.0b
Git git=1.0.3
Git git=1.0.4
Git git=1.0.5
Git git=1.0.6
Git git=1.0.7
Git git=1.0.8
Git git=1.1.0
Git git=1.1.1
Git git=1.1.2
Git git=1.1.3
Git git=1.1.4
Remediation
Patch Available
Patch Available
Event History
Jan 31, 2006
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0477?
CVE-2006-0477 is considered a critical vulnerability due to the possibility of remote code execution.
2
How do I fix CVE-2006-0477?
To mitigate CVE-2006-0477, upgrade to Git version 1.1.5 or later as it addresses this buffer overflow issue.
3
Which versions of Git are affected by CVE-2006-0477?
CVE-2006-0477 affects Git versions prior to 1.1.5, including versions 1.0.0 through 1.1.4.
4
What are the potential impacts of CVE-2006-0477?
Exploiting CVE-2006-0477 could allow an attacker to execute arbitrary code on the affected system.
5
How was CVE-2006-0477 discovered?
CVE-2006-0477 was discovered through the analysis of Git's handling of symbolic links in index files.