QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-0855

Back to search

CVE-2006-0855

Published: Feb 23, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.

VendorProductVersions

n/a

n/a

affected
n/a

References

1015866
vdb-entry
x_refsource_SECTRACK
19408
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2006:005
vendor-advisory
x_refsource_SUSE
19166
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2006:006
vendor-advisory
x_refsource_SUSE
ADV-2006-1220
vdb-entry
x_refsource_VUPEN
19514
third-party-advisory
x_refsource_SECUNIA
546
third-party-advisory
x_refsource_SREASON
GLSA-200603-05
vendor-advisory
x_refsource_GENTOO
1015668
vdb-entry
x_refsource_SECTRACK
19130
third-party-advisory
x_refsource_SECUNIA
zoo-misc-bo(24904)
vdb-entry
x_refsource_XF
ADV-2006-0705
vdb-entry
x_refsource_VUPEN
DSA-991
vendor-advisory
x_refsource_DEBIAN
19002
third-party-advisory
x_refsource_SECUNIA
19148
third-party-advisory
x_refsource_SECUNIA
16790
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now