4.6

CVE-2006-4127

Exploit
Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dconnect ≫ Dconnect Daemon Version0.0.2
Dconnect ≫ Dconnect Daemon Version0.0.3
Dconnect ≫ Dconnect Daemon Version0.7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.12% 0.795
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:N/AC:H/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/21384
Vendor Advisory
http://securityreason.com/securityalert/1377
http://securitytracker.com/id?1016641
Exploit
http://www.dc.ds.pg.gda.pl/
Patch
http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog
http://www.securityfocus.com/archive/1/442440/100/0/threaded
http://www.vupen.com/english/advisories/2006/3181
http://www.securityfocus.com/bid/19371
Patch
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/28280