CVE-2006-1269: Buffer Overflow
Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1269?
CVE-2006-1269 has a moderate severity level due to the potential for local users to execute arbitrary code.
How do I fix CVE-2006-1269?
To fix CVE-2006-1269, upgrade to Zoo version 2.10 or later, as this version addresses the buffer overflow vulnerability.
Who is affected by CVE-2006-1269?
CVE-2006-1269 affects local users of Zoo version 2.10 on systems where the software is installed.
What type of vulnerability is CVE-2006-1269?
CVE-2006-1269 is classified as a buffer overflow vulnerability that can be exploited through long filename command line arguments.
Can CVE-2006-1269 be exploited remotely?
No, CVE-2006-1269 is not exploitable remotely as it requires local access to the affected system.