4.6

CVE-2006-2409

Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Raydium ≫ Raydium Version svn_revision_283
Raydium ≫ Raydium Version svn_revision_284
Raydium ≫ Raydium Version svn_revision_285
Raydium ≫ Raydium Version svn_revision_286
Raydium ≫ Raydium Version svn_revision_287
Raydium ≫ Raydium Version svn_revision_288
Raydium ≫ Raydium Version svn_revision_289
Raydium ≫ Raydium Version svn_revision_290
Raydium ≫ Raydium Version svn_revision_291
Raydium ≫ Raydium Version svn_revision_292
Raydium ≫ Raydium Version svn_revision_293
Raydium ≫ Raydium Version svn_revision_294
Raydium ≫ Raydium Version svn_revision_295
Raydium ≫ Raydium Version svn_revision_296
Raydium ≫ Raydium Version svn_revision_297
Raydium ≫ Raydium Version svn_revision_298
Raydium ≫ Raydium Version svn_revision_299
Raydium ≫ Raydium Version svn_revision_300
Raydium ≫ Raydium Version svn_revision_301
Raydium ≫ Raydium Version svn_revision_302
Raydium ≫ Raydium Version svn_revision_303
Raydium ≫ Raydium Version svn_revision_304
Raydium ≫ Raydium Version svn_revision_305
Raydium ≫ Raydium Version svn_revision_306
Raydium ≫ Raydium Version svn_revision_307
Raydium ≫ Raydium Version svn_revision_308
Raydium ≫ Raydium Version svn_revision_309
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.89% 0.548
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

http://aluigi.altervista.org/adv/raydiumx-adv.txt
Vendor Advisory
http://raydium.org/svn.php
http://secunia.com/advisories/20097
Patch
Vendor Advisory
http://securityreason.com/securityalert/900
http://www.securityfocus.com/archive/1/433930/100/0/threaded
http://www.securityfocus.com/bid/17986
http://www.vupen.com/english/advisories/2006/1808
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26514